1. Scope and Roles
1.1 Two Categories of Personal Information
Business Contact and Account Data is personal information collected directly from Shop owners, employees, authorized Users, Vehicle Owners who create or use an account directly, prospective customers, and website visitors. USMS is a Business or Controller for this data and this Privacy Policy governs that processing.
End Customer Data is personal information that a Shop uploads to, or collects through, the Service about its own customers, such as vehicle owners. USMS acts as a Service Provider or Processor for End Customer Data on the Shop’s behalf and processes it only under the Shop’s instructions and the Terms and Conditions. An End Customer should contact the applicable Shop about a request; they may also contact USMS using Section 14, and we will refer the request to the Shop or respond as required by law.
1.2 Who this Policy Covers
This Policy applies to Users, Vehicle Owners, prospective customers, website visitors, and, where applicable, End Customers whose information is processed through the Service. It does not apply to third-party websites, applications, or services linked from the Service.
2. Categories of Personal Information We Collect
Depending on how you use the Service, USMS may collect the following categories of personal information, consistent with CCPA categories:
- Identifiers.
- Name, business title, email address, postal address, phone number, account username, IP address, and unique online identifiers.
- Customer Records Information.
- Information similar to California Civil Code § 1798.80(e), such as name, address, telephone number, and payment-card information processed by our payment processor.
- Commercial Information.
- Subscription plan, billing and purchase history, repair or service history, and products or services considered or obtained.
- Internet or Network Activity.
- Browsing history on our website, log data, device identifiers, interactions with the Service, and information collected through cookies and similar technologies.
- Geolocation Data.
- Approximate location derived from IP address and, where a User enables location-based functionality, precise location.
- Professional or Employment Information.
- Job title, employer or Shop name, and role within a Shop.
- Audio Electronic or Visual Information.
- Profile and repair photos, and communication records such as chat transcripts or recordings if a Customer enables an applicable communication-logging feature, subject to applicable consent and recording laws.
- Sensitive Personal Information.
- Government identifiers if voluntarily provided through an applicable feature, precise geolocation, and account log-in credentials in combination with a password or credentials allowing account access.
- Inferences.
- Inferences drawn from the above to create a profile about preferences or characteristics, such as usage patterns used to improve the Service.
End Customer Data may include name, address, phone number, email address, vehicle identification number, vehicle make, model, year, and mileage; service and repair history; appointment and communication records; and payment information processed through an integrated payment processor. USMS processes End Customer Data only as a Service Provider or Processor for the applicable Shop.
We do not knowingly collect Sensitive Personal Information beyond what is reasonably necessary to provide the Service, and do not collect health, genetic, biometric information used for identification, or precise geolocation as a core Service feature.
3. Sources of Personal Information
We collect personal information directly from Users when they create an account, contact us, or use the Service; directly from Shops and their Users when they input End Customer Data; automatically through use of the Service and website via cookies and similar technologies; from service providers that help operate the Service, such as payment processors and hosting providers; and from publicly available sources.
4. How We Use Personal Information
We use personal information to provide, maintain, and support the Service; create and manage accounts; process payments and billing; provide legally required auto-renewal disclosures; communicate service updates, security alerts, and administrative messages; provide support; send marketing communications where permitted and in accordance with opt-out preferences; analyze usage and improve the Service; detect, investigate, and prevent fraud, abuse, and security incidents; comply with law and enforce our Terms; and process End Customer Data solely as directed by the applicable Shop. We do not use Sensitive Personal Information beyond purposes permitted by the CCPA/CPRA and comparable laws.
5. How We Disclose Personal Information
5.1 Categories of Recipients
We may disclose personal information to service providers performing functions for us, such as cloud hosting, payment processing, customer-support tools, analytics providers, and email or SMS delivery providers, each subject to contractual limits on its use; professional advisors; government authorities or other parties when required by law or to protect rights, property, or safety; and an acquirer or successor in a merger, acquisition, financing, reorganization, bankruptcy, or asset sale.
5.2 No Sale or Sharing
USMS does not sell personal information for monetary consideration and does not share personal information, as defined under the CCPA/CPRA, for cross-context behavioral advertising. If this changes, we will update this Policy and provide required notices and opt-out mechanisms.
5.3 End Customer Data
We disclose End Customer Data only as instructed by the applicable Shop, to subprocessors engaged to provide the Service, or as required by law. A current list of material subprocessors is available on written request.
7. Data Retention
We retain personal information as long as necessary to provide the Service, fulfill the purposes in this Policy, comply with legal obligations, resolve disputes, and enforce agreements, then delete or de-identify it under our retention schedule. End Customer Data is retained according to the applicable Shop’s instructions, the Terms and Conditions, and our standard post-termination retention period, except where retention is required by law.
8. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction, consistent with industry standards and applicable law. Measures may include encryption in transit and at rest, access controls, network monitoring, and employee training. No transmission or storage method is completely secure. If a security incident affects unencrypted personal information, we will provide notification in accordance with applicable breach-notification laws.
9. California Privacy Notice CCPA CPRA
This Section applies to California residents and supplements the rest of this Policy. The categories collected, their sources, purposes, and disclosures to service providers in the preceding 12 months are described in Sections 2 through 5. We do not sell or share personal information as described in Section 5.
9.1 Your California Privacy Rights
California residents may have the right to know the categories and specific pieces of personal information collected, sources, purposes, and categories of recipients; delete personal information subject to lawful exceptions; correct inaccurate personal information; opt out of sale or sharing if our practice changes; limit certain use and disclosure of Sensitive Personal Information; receive a portable copy of personal information; and not be discriminated against for exercising these rights. You may also have a right to appeal a denial.
9.2 How to Submit a Request
You may submit a verifiable consumer request by emailing usmechanicservices@gmail.com or calling (510) 737-3674. You may designate an authorized agent by providing written proof of authority; where necessary, we may verify your identity directly. We may match information you provide with records we maintain and request additional information to verify identity for requests to know specific information or delete data.
9.3 Response Timing and Appeals
We will respond to a verifiable consumer request within 45 days of receipt and may extend that period by an additional 45 days when reasonably necessary with notice. If we deny a request in whole or part, you may appeal by contacting usmechanicservices@gmail.com within a reasonable time. We will respond to an appeal within 60 days.
9.4 Shine the Light and Notice at Collection
USMS does not disclose personal information to third parties for their own direct-marketing purposes under California Civil Code § 1798.83. This Privacy Policy, together with point-of-collection notices provided in the Service, serves as our notice at collection of the categories of personal information collected and purposes for which they are used.
10. Privacy Rights for Residents of Other States
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Tennessee, Florida, Nebraska, New Hampshire, New Jersey, Kentucky, Maryland, Minnesota, Rhode Island, or another state with a comprehensive consumer privacy law may have rights, subject to applicable requirements and exemptions, to confirm and access personal data, correct inaccuracies, delete data, obtain a portable copy, opt out of targeted advertising, sale, or certain profiling, and appeal a decision. Exercise these rights through Section 14. We will respond within the time required by applicable law and provide a method to appeal where required. USMS does not sell personal information or use it for cross-context behavioral or targeted advertising.
11. Children’s Privacy
The Service is intended for adults and not directed to children. We do not knowingly collect personal information from children under 13 in a manner subject to COPPA, or from individuals under 16 in a manner requiring opt-in consent under the CCPA’s provisions about minors. If we learn that we collected personal information from a child in violation of law, we will take steps to delete it.
12. Third Party Links and Integrations
The Service may contain links to, or integrate with, third-party websites, applications, and services, including payment processors, parts suppliers, and accounting software. This Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing personal information.
13. International Users
The Service is hosted in the United States and intended for businesses operating in the United States. If you access it from outside the United States, your personal information will be transferred to, stored, and processed in the United States. USMS does not intend to process personal information subject to the EU GDPR, UK GDPR, or other non-U.S. privacy laws without a separate agreement addressing applicable international-transfer requirements.
14. Contact Us
For questions, privacy-rights requests, or any other privacy matter, contact us at:
USMS Inc.
44240 Fremont Blvd, Suite 10
Fremont, CA 94538
General, privacy, legal, and billing inquiries: usmechanicservices@gmail.com
Phone: (510) 737-3674
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email, in-app notification, or a notice on the Service or website at least 15 days before they take effect, except where an immediate change is required to comply with law or address a security issue. The Last Updated date identifies the most recent revision. Continued use after the effective date constitutes acceptance of the revised Policy.