Privacy Policy
Effective August 6, 2026
Shop Route Board LLC ("Shop Route Board," "we," "us," or "our") provides a hosted service for managing dealership service-department route boards (the "Service"). This Privacy Policy explains what information we collect through the Service, how we use it, and the choices you have. It applies to visitors of our marketing site, users of our interactive demo, and staff accounts within a dealership's tenant ("Customer").
1. Information We Collect
| Category | What it includes |
|---|---|
| Account information | Username, display name, role, and, where provided, an email address used for invitations and password resets. Passwords are stored only as salted cryptographic hashes; we never store or can retrieve a plain-text password. |
| Board content | Repair-order numbers, advisor/technician identifiers, statuses, priorities, notes, and similar work-tracking data entered by a Customer's staff into their tenant. |
| Chat and messages | Message text, sender, timestamps, and mentions sent through the Service's built-in chat. |
| Push notification data | If you opt in to browser push notifications, we store the subscription endpoint and encryption keys your browser generates, along with a general browser/device identifier (user agent), so we can deliver notifications to that browser. |
| Contact and lead information | Name, company name, email, phone number, and message content you submit through our public contact form, along with the page you submitted it from and your IP address. |
| Technical and log data | IP address, timestamps, and basic request metadata generated by using the Service, used for security purposes such as detecting repeated failed logins. |
| Session cookie | A single functional cookie that keeps you signed in. See "Cookies" below. |
If you are a staff user of a Customer's tenant, most of your account and activity data is entered or provisioned by your employer's administrator, not collected directly from you through a public sign-up flow.
2. How We Use Information
- to provide, maintain, and secure the Service, including authenticating logins and isolating each Customer's data from other Customers;
- to send transactional emails you or your administrator trigger — account invitations, password-reset links, and replies to contact-form submissions;
- to deliver push notifications you have opted into;
- to respond to support and sales inquiries submitted through our contact form; and
- to detect, investigate, and prevent security incidents, fraud, and abuse.
We do not use your information for interest-based advertising, and we do not sell personal information.
3. Cookies
The Service uses a single, strictly necessary session cookie to keep you signed in across pages. We do not use third-party analytics, advertising, or tracking cookies, and the Service does not embed third-party analytics or ad-tech scripts.
4. Push Notifications
Browser push notifications are opt-in and delivered through your browser vendor's push relay service (for example, Google, Mozilla, or Apple, depending on your browser). These vendors receive the delivery endpoint needed to route a notification to your device but do not have access to your Shop Route Board account or board content. You can revoke notification permission at any time through your browser settings.
5. Email
We send transactional email only — account invitations, password resets, and replies triggered by the contact form — from our own mail server. We do not maintain a marketing email list and do not use a third-party email marketing platform.
6. How We Share Information
We do not sell personal information. We share information only:
- with our hosting and infrastructure providers, who process data on our behalf solely to operate the Service;
- with browser push-notification relay services, as described above, limited to what is needed to deliver a notification;
- within a Customer's own tenant, where board content, notes, and chat messages are visible to that Customer's authorized staff according to their assigned roles; or
- where required to comply with law, protect our rights, or investigate abuse of the Service.
7. Dealership (Customer) Responsibilities
A dealership using the Service controls what its staff enter into board notes, chat, and other free-text fields. If a Customer's staff enter personal information about the dealership's own customers (for example, in a repair-order note), that Customer is responsible for having a lawful basis to do so and for complying with laws that apply to that information. We process such content only as instructed by, and on behalf of, the Customer.
8. Data Retention
We retain account and board data for as long as a Customer's tenant is active, and for a reasonable period afterward in case of reactivation or as needed for legal, security, or backup purposes, after which it is deleted or anonymized. Contact-form submissions are retained as needed to respond to and track inquiries. The public interactive demo is reset on a recurring schedule and is not intended for data retention at all.
9. Data Security
We use industry-standard measures such as password hashing, encrypted transport (HTTPS), and tenant-level data isolation to protect information handled by the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Choices and Rights
Depending on your location, you may have rights to access, correct, or delete personal information we hold about you, or to object to certain processing. If you are a staff user, many of these requests are best directed to your dealership's administrator, who controls your account. You can otherwise reach us at hello@shoprouteboard.com and we will respond consistent with applicable law.
11. Children's Privacy
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from children.
12. International Users
The Service is operated from, and information is hosted on servers located in, the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify account administrators.
14. Contact
Questions about this Privacy Policy can be sent to hello@shoprouteboard.com.