Privacy Policy

GarageRoute (“we”, “us”, or “our”) operates the website at garageroute.com and the GarageRoute mobile applications. This Privacy Policy explains what information we collect when you use our service, how we use it, and the choices you have.

We design our marketplace around two principles: collect only what we need, and let you delete it whenever you want. If something is unclear, email us at privacy@garageroute.com and we'll explain.

We collect three categories of information:

• Account information — name, email, and password hash if you create a seller account. Buyer accounts are created implicitly when you sign up for alerts or message a seller.
• Listing content — sale descriptions, photos, item names, prices, and locations you post. Photos you upload may contain EXIF metadata (location, time, device) which we strip before publishing.
• Usage data — pages viewed, searches run, alerts triggered, and aggregate clicks. We use this to improve search ranking and detect abuse.

• To show your listings and messages to other users as intended.
• To send transactional emails (sale confirmations, message notifications, reservation receipts).
• To send alerts you've subscribed to. You can unsubscribe in one click from any email.
• To detect and prevent fraud, spam, and abuse. Automated systems may flag suspicious content for human review.
• To comply with legal obligations and respond to valid law-enforcement requests.

We do not sell your personal information. Period. We share data only in the following cases:

• With other users as intended. When you post a sale, public listing details are visible to anyone browsing. When you message a seller, your message and display name are shared with that seller.
• With service providers. We use a small set of vendors (hosting, email delivery, payment processing) who process data on our behalf under written agreements.
• For legal reasons. If we receive a valid subpoena, court order, or similar legal process.
• Business transfers. If GarageRoute is acquired or merges, your information may be transferred under continued protection of this policy.

We use a small number of cookies and local-storage entries to keep you signed in, remember your route, and measure traffic. We do not use third-party advertising cookies. See our Cookie Policy for details.

• Access & export. Request a copy of all data we hold about you. We deliver within 30 days.
• Delete. Delete your account and we erase associated personal data within 30 days. Public listings may be retained in anonymized form for trust-and-safety records.
• Correct.Update incorrect information directly in your dashboard, or email us and we'll fix it.
• Unsubscribe. Every marketing email has a one-click unsubscribe link.

We use industry-standard encryption in transit (TLS 1.2+) and at rest. Seller accounts are protected by single-use, cryptographically random tokens issued at posting time. Admin actions are logged in an immutable audit trail. See our Security page for the full picture.

GarageRoute is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we'll remove it.

If we make material changes, we'll email active account holders at least 30 days before the change takes effect and post a notice on our homepage.

Privacy questions? Email privacy@garageroute.com. Our Data Protection Officer reviews every request.