How we protect
your data.
My Car Concierge keeps the personal data it needs to run a car-care marketplace, and limits who can see it. This page says plainly what we store, where it is kept, who can see it, and what we don't do.
Your details go only where they are needed
Your street address
A shop that is bidding on your job sees your city and ZIP code. Your street address goes only to the provider whose bid you accept.
Your name, phone and email
Shops that are bidding do not see them. The provider whose bid you accept gets your contact details so they can reach you about the job.
Your card
Card details go straight to Stripe, our payment processor. My Car Concierge never sees or stores your full card number.
Your password
We never see or store your password in readable form. Sign-in is handled by Supabase Auth, which keeps only a scrambled (hashed) version.
Photos of your car
Photos you add to a job can be seen by you and by the provider whose bid you accept.
Background checks
Background checks are optional for providers and are run by a screening company. We do not store background check reports, Social Security numbers or dates of birth. We keep only whether a check is clear and when it expires.
Where your data is kept
My Car Concierge runs on three established services. Each one publishes its own security practices.
- Accounts, vehicles, jobs and messages are stored with Supabase. Supabase states that customer data is encrypted at rest with AES-256 and in transit with TLS, and that it is SOC 2 Type 2 compliant. Supabase security.
- Payments and provider payout details are handled by Stripe. Stripe is certified as a PCI Service Provider Level 1, the strictest level in the payments industry. Stripe security.
- The website is served by Netlify over an encrypted (HTTPS) connection.
Those certifications belong to those companies, not to My Car Concierge. We are a small company and have not yet had our own independent security audit.
How access is limited
Every table in our database has access rules. A signed-in user can read only the rows those rules allow, such as their own account, their own vehicles and their own jobs.
Actions that affect money or trust, such as granting bid credits or marking a provider as verified, can only be done by our servers or by an administrator. They cannot be done from a browser.
What we don't do
- We do not sell your personal information.
- We do not set analytics or advertising cookies unless you choose "Accept All" in the cookie banner. You can change that choice at any time from "Cookie settings".
- Our analytics never record what you type into a form.
- We do not store your full card number.
Your controls
- Delete your account and data
- Your privacy choices
- Privacy Policy, including the full list of services we share data with and why
If something goes wrong
If we learn that your personal data was accessed by someone who should not have had it, we will tell you, and we will notify the authorities as the law requires.
If you think you have found a security problem, or you see something on your account you don't recognize, email support@mycarconcierge.com with "Security" in the subject line. Please don't post the details publicly.
What we can't promise
No website or app can promise that data will never be exposed. We keep the data we hold to what the service needs, limit who can see it, and fix problems when we find them.
Last updated: October 5, 2026.