Privacy Policy

We collect the following types of information:

• Personal Information: First name, last name, mobile number, and phone number provided during signup.
• Social Login Information: If you sign up or log in using Facebook, Apple, or Google, we collect your first name, last name, email address, and phone number (if available) from these providers, subject to their privacy policies and your consent.
• Vehicle and Service Information: Receipts, logbook entries, vehicle images, videos, registration/insurance documents, and Proof of Service Certificates uploaded by users or workshops.
• Workshop Information: Australian Business Number (ABN), business name, and customer data uploaded by workshops (stored securely and segmented to prevent access by other workshops).
• Automatically Collected Information: IP address, device information, usage data, and analytics (with your consent). For details on our use of cookies, see our Cookies Policy.
• App-Specific Information: Device identifiers, crash logs, and performance data to ensure App functionality.

We use your information to:

• Facilitate account creation and authentication via social login (Facebook, Apple, Google).
• Provide and improve our services, including service history aggregation, digital logbook management, Proof of Service Certificates, workshop bookings, pre-purchase inspections, and rewards programs.
• Process data using artificial intelligence (AI) tools (e.g., OpenAI, xAI’s Grok) to extract information from receipts/logbooks and analyse vehicle images for defects.
• Facilitate communication, such as workshop-user messaging, SMS for bookings, and sharing report builder contact details (email, phone) with signed-up users.
• Conduct analytics and send marketing communications (with your explicit opt-in consent).
• Comply with legal obligations, such as consumer law requirements.

We use third-party AI providers (e.g., OpenAI, xAI’s Grok) to process receipts, logbook entries, and vehicle images. This may involve:

• Extracting data (e.g., date, mileage, invoice title).
• Analysing images for defects (e.g., dents, scratches).
• Risks: AI processing may result in errors (e.g., incorrect data extraction). We are not liable for such errors, and you are responsible for verifying outputs.
• Security: Data is encrypted and sanitised (e.g., personal details removed) before AI processing.
• International Transfers: Some AI providers are based in the United States. We use Standard Contractual Clauses to ensure compliance with Australian privacy laws.

We share your information as follows:

• Internal Sharing: Service history is shared with signed-up users (e.g., workshops accessing vehicle records).
• Third-Party Service Providers: We share data with providers such as Stripe (payments), OpenAI/xAI (AI processing), Amazon Web Services (AWS, storage), Facebook/Apple/Google (social login), and third parties for vehicle details (e.g., PPSR checks). Where applicable, we may enter into Data Processing Agreements with partners to clarify roles under Australian or international privacy laws.
• Rewards Program: Limited data (e.g., email) may be shared with partners to deliver discount codes or giveaways, with your consent.
• Proof of Service Certificates: Reports are shareable by users without restrictions, with sensitive data (e.g., personal details) removed.
• Future Partnerships: We may share data with new partners (e.g., invoicing systems) with your consent.
• Legal Requirements: We may disclose data to comply with legal obligations or respond to lawful requests.

• Storage: Data is stored on AWS servers with encryption, segmented by workshop to prevent unauthorised access (e.g., one workshop’s data is not accessible by others).
• Security Measures: We use encryption, access controls, and regular audits to protect your data in accordance with APP 11.
• Retention: Personal information is retained until you delete your account, but service history and uploaded data (e.g., receipts, images) are retained indefinitely for platform purposes, including maintaining vehicle records for reporting and compliance. We may retain data for legal purposes (e.g., consumer law compliance).

By signing up and accepting our Terms and Conditions, or by authorising social login through Facebook, Apple, or Google, you consent to the collection, use, and sharing of your information as described in this Privacy Policy. Users who choose social login cannot switch to a non-social login method (e.g., email/password) unless they create a new account. You provide explicit opt-in consent for:

• Analytics to improve our services.
• Marketing communications (e.g., promotional emails).
• Rewards program communications (e.g., discount codes).

Workshops are responsible for notifying their clients that their data is shared with Glovbox, with an opt-out option. If a client opts out, their data is locked or deleted.

Under the Australian Privacy Principles, you have the right to:

• Access and correct your personal information.
• Delete your account (note: service history and uploaded data are retained).
• Opt out of analytics, marketing, or rewards communications.

To exercise these rights, contact us at info@glovbox.com.au. We will respond to your request within 30 days, as required by the Australian Privacy Principles. You may also lodge complaints about our data handling with us or the Office of the Australian Information Commissioner (OAIC).

In the event of a data breach, we will promptly notify affected users and workshops and take reasonable steps to mitigate risks, such as implementing security updates and providing guidance.

For privacy inquiries, support, or complaints, contact:

MY SERVICE SPOT PTY LTD (ABN 54 666 294 328)
Email: info@glovbox.com.au
Registered Address: Available upon request where required by law.

You may also lodge complaints with the OAIC (www.oaic.gov.au).

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you via email or the App, and continued use constitutes acceptance.