Privacy Policy

Last updated: April 2026

1. Information We Collect

Account information: Username, email, display name, and password (hashed).

Inventory data: Parts, locations, projects, and orders you create.

Usage data: IP addresses, browser type, and pages visited (for security and analytics).

Payment information: Processed by Stripe. We do not store credit card numbers.

2. How We Use Your Information

• To provide and maintain the Service
• To process payments and manage subscriptions
• To send transactional emails (password reset, invitations)
• To improve the Service and fix bugs
• To prevent abuse and enforce our Terms of Service

3. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe — for payment processing
• AWS — for hosting infrastructure
• OpenAI — for AI features (component data only, not personal info)

4. Data Storage

Your data is stored on AWS infrastructure in the US (us-west-2 region). Databases are encrypted at rest. All connections use TLS encryption.

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we delete your personal data within 30 days. Anonymized usage statistics may be retained.

6. Your Rights

You have the right to:

• Access your data (export via CSV)
• Correct your data (edit profile)
• Delete your account and data
• Object to data processing

7. Cookies

We use a single session cookie (pm_session) for authentication. We do not use tracking cookies or third-party analytics.

8. Children

The Service is not intended for users under 13. We do not knowingly collect data from children.

9. Changes

We may update this policy. We'll notify you via email for significant changes.

Contact

Privacy questions? Contact us at privacy@mypartsdb.com.