Privacy Policy
Last updated: 2026-10-22
1. Who we are
Rocket Platform LLC (“GaragePulse”, “we”, “us”) is a limited liability company organised under the laws of United States, with its registered address at Pending registered address. We operate the GaragePulse website and application at https://garagepulse.app (the “Service”).
We are the data controller for the personal data described in this policy, except for data that our business customers upload about their own customers, where we act as a data processor on their behalf (see section 9). Contact us at privacy@garagepulse.app.
This policy applies to visitors and users located in Costa Rica and United States. Where a law gives you stronger rights than those described here, the stronger rights apply.
2. What we collect and why
We collect only the data we need to run the Service. Fields marked as optional in our forms are never required to use it. The table below is our complete data inventory.
| Data | Why we use it | Legal basis | How long we keep it | Required |
|---|---|---|---|---|
| Shop owner account email | Create, secure, and manage the shop owner account | Performance of a contract | While the account is active, then as required for legal records | Yes |
| Shop owner name | Identify the account owner and personalize support | Performance of a contract | While the account is active | Yes |
| Shop owner phone | Optional account recovery, support, and onboarding contact | Your consent | While the account is active or until removed | Optional |
| Shop owner WhatsApp lifecycle opt-in | Send owner-requested GaragePulse onboarding help messages during trial activation | Your consent | While the account is active or until opt-out | Optional |
| Growth consent evidence IP address and user agent | Consent evidence | Legal obligation | Until opt-out or deletion/export closure of the lead record | Optional |
| Growth lead WhatsApp marketing consent proof | Record optional WhatsApp marketing consent for GaragePulse pilot follow-up | Your consent | Until opt-out or deletion/export closure of the lead record | Optional |
| Growth lead business type answer | Qualify GaragePulse pilot interest and route follow-up by shop size | Legitimate interest | Until deletion/export closure of the lead record | Optional |
| Growth lead service bays answer | Qualify GaragePulse pilot interest and estimate operational fit | Legitimate interest | Until deletion/export closure of the lead record | Optional |
| Growth lead current system answer | Understand the lead onboarding context for GaragePulse pilot follow-up | Legitimate interest | Until deletion/export closure of the lead record | Optional |
| Growth lead timing answer | Prioritize GaragePulse pilot follow-up based on requested timing | Legitimate interest | Until deletion/export closure of the lead record | Optional |
| Shop legal name and tax id | Invoicing and Costa Rica electronic invoice setup | Legal obligation | For the period required by fiscal law | Yes |
| Shop address | Billing, fiscal documents, and shop profile setup | Performance of a contract | While the account is active, then as required for legal records | Yes |
| Stripe customer id and card last4 | Manage subscriptions without storing full payment card details | Performance of a contract | While billing records must be retained | Yes |
| Technical logs | Security, debugging, fraud prevention, and service reliability | Legitimate interest | Up to 90 days unless needed for security investigation | Yes |
| WhatsApp opt-in phone numbers | On behalf of the shop: send WhatsApp and SMS updates to opted-in customers | Performance of a contract | While the shop keeps the customer record, until opt-out, or until the shop exits and requests deletion/export closure | Yes |
| Vehicle plates and VINs | On behalf of the shop: identify vehicles, run plate lookups, and cache lookup results | Performance of a contract | While the shop keeps the vehicle record, then deleted or anonymized on shop exit unless legal retention applies | Yes |
| Work-order and invoice records | On behalf of the shop: provide repair history, service operations, and fiscal records | Legal obligation | Available for owner export on exit; fiscal invoice records retained per Costa Rica fiscal law for 5 years, and non-required operational copies are deleted or anonymized after closure | Yes |
| Support conversations | Resolve support requests and keep an audit trail of assistance | Legitimate interest | While needed for support history and legal records | Yes |
We also receive technical data automatically when you use the Service: IP address, browser and device type, pages viewed, and approximate location derived from your IP. We use it to keep the Service secure, to fix errors and, only with your consent, to understand how the Service is used.
The Service is not directed at children under 18. We do not knowingly collect their data; if you believe a child has provided data to us, contact us and we will delete it.
3. Analytics and tracking
With your consent we use Google Analytics 4, Microsoft Clarity and PostHog to measure how the Service is used. These tools set cookies or similar identifiers only after you accept them in our cookie banner, and you can withdraw that consent at any time from “Cookie settings” in the footer. Details are in our Cookie Policy at https://garagepulse.app/cookies.
We do not sell your personal data. Where the use of advertising cookies could be considered “sharing” under the California Consumer Privacy Act, rejecting marketing cookies in our banner acts as your “Do Not Sell or Share My Personal Information” request. We also honour Global Privacy Control signals sent by your browser.
5. How we protect your data
We encrypt data in transit and at rest, restrict access to staff who need it, use hosting providers with independent security certifications, and log security events. No system is perfectly secure; if a breach affects your data we will notify you and the competent authority within 5 business days to PRODHAB and the affected persons (Costa Rica) and without unreasonable delay under applicable state breach laws (United States).
6. How long we keep data
We keep each type of data for the period stated in section 2. When it is no longer needed we delete or anonymise it, except where the law requires us to keep it longer (for example invoices and tax records).
7. Your rights
You can, at any time and free of charge:
- Access the personal data we hold about you and receive a copy in a portable format.
- Correct data that is inaccurate or incomplete.
- Delete your data and close your account.
- Object to or restrict certain processing, including direct marketing.
- Withdraw consent where processing is based on consent, without affecting what happened before.
- Opt out of the sale or sharing of your personal data and not be discriminated against for exercising your rights.
To exercise a right, write to privacy@garagepulse.app from the email address on your account or use the privacy options inside the Service. We answer within 30 days (5 business days for access requests under Costa Rican law) and may ask you to verify your identity first.
Costa Rica: these are your rights of access, rectification, cancellation and opposition (ARCO) under Ley 8968 de Protección de la Persona frente al Tratamiento de sus Datos Personales y su Reglamento (Decreto 37554-JP). If you believe we have not honoured them you may file a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB) (https://www.prodhab.go.cr).
California residents: you may designate an authorised agent to make requests on your behalf. We do not offer financial incentives in exchange for personal data.
8. Marketing communications
We send marketing email, SMS or WhatsApp messages only if you opted in, and every message includes a way to unsubscribe. Transactional messages about your account or purchases are sent regardless, because they are part of the Service. Unsubscribing from marketing never affects those.
9. Data our business customers upload
Businesses that use GaragePulse upload data about their own customers (for example names, phone numbers, vehicle or order details). For that data the business is the controller and we are its processor: we process it only on the business’s instructions, under our Data Processing Addendum at https://garagepulse.app/dpa. If you are a customer of one of those businesses and want to exercise your rights, contact that business directly; we will help them respond.
10. Changes to this policy
We may update this policy. The date at the top always shows the current version. For material changes we will notify you by email or inside the Service at least 15 days before they take effect.
11. Contact
Rocket Platform LLC, Pending registered address. Privacy: privacy@garagepulse.app. Support: support@garagepulse.app.