Privacy
Private records, public choices, and how the current pilot handles information.
Information SUB7 handles
SUB7 stores the account identifier and profile received from your sign-in provider; the provider handles its own password. We also store information you submit, including vehicle records, receipts, stories, listing revisions and photographs, messages, and inquiries.
Garage records and receipt originals are private to authorized workspace members. Owner, manager, technician, and sales roles have different permissions. Uploading a receipt does not publish it.
Purpose and sharing
Information is used to operate accounts, maintain records, provide requested assistance, handle inquiries, protect the service, and deliver the content you choose to publish. A seller inquiry shares your name, email, message, and inspection request with the seller's authorized workspace.
Published Journeys and classified revisions are public. Private acquisition costs and original Garage receipts are not automatically included. Public pages and exports may be copied by others, and withdrawing a page cannot recall those copies.
Concierge and service providers
Concierge sends your messages and authorized tool results needed for the conversation to Microsoft's configured model service. Those results may include private record text. Saved-action receipts and conversation records support recovery and usage accounting. Do not submit data you are not permitted to share.
SUB7 uses hosting and media storage, Cloudflare delivery and security, external sign-in providers, and email services. When transactional email is enabled, the delivery provider processes the notification and recipient information. Provider processing may occur outside your country.
Browser storage and referrals
Essential cookies support sign-in and request protection. Browser storage remembers conversation state and whether an article view has been counted. Partner redirects record the partner, placement, time, same-site referrer, coarse country/region/city when supplied by Cloudflare, and a referral token. The partner click record does not store a raw IP address; infrastructure security logs may process IP addresses.
Click counts are not unique people, qualified leads, or completed sales. A destination may receive its referral token and apply its own privacy notice.
Site measurement
SUB7 measures its own traffic without analytics cookies or third-party trackers. A page view records the path, referring site, campaign tags, device class, country when supplied by Cloudflare, and a daily visitor code derived from a keyed one-way hash. The code changes every day and cannot be reversed into an IP address or browser identity; no raw IP address or full user agent is stored. When a partner link is shown on screen, its placement is counted so partner reach can be reported.
Measurement records are deleted after about 13 months. Automated clients are filtered where they identify themselves.
Retention and your requests
Original Inbox files remain available after review or rejection. Removing a history attachment does not remove an original still referenced by the Inbox or another authorized record. Published sale history is retained to preserve the historical listing record. Backups and operational records may outlast removal from the live interface.
Contact [email protected] for access, correction, export, or deletion requests. We may need to verify your account and explain information that must be retained. Do not send identity documents with the initial request.
Pilot notice
This notice describes the current pilot. Before a broader commercial launch, the operator identity, retention schedule, and applicable legal requirements must be finalized. Material changes will be reflected here.