Privacy policy

Who we are

Autowork AI makes and runs these apps: Garage, for car owners; Garage Manager, for garage teams; Autowork Recovery, for recovery and towing companies and their drivers; and Autowork Parts, for parts stores. For your own account in any of them, we are responsible for your data. You can reach us at support@garage.autowork.ae.

Garages, recovery companies and parts stores also use our apps to keep records about their own customers. For those records the business decides what to keep and why, and we store and process them on its behalf. To change or delete what a business holds about you, ask that business; we will help if it doesn't answer.

What we collect

Car owners (Garage):

• Your account: your mobile number (the key to your account, confirmed with a code on WhatsApp), your name, your email and your language.
• How you sign in: a code we email you; or Google or Apple, from which we receive only your confirmed email address (Apple may give a private relay address); or UAE PASS where it is offered, from which we receive your name, mobile number and email — never your Emirates ID number.
• Your cars: plate, make, model, year, colour, VIN, registration (Mulkiya) expiry, odometer readings, and the documents, photos, costs, reminders and modifications you add.
• The people you share a car with (their mobile number) and anyone you transfer a car to.
• A request for help on the road: where the car is, where it should go, and the details you give.
• What garages you use keep about you — your visits, quotes, invoices and photos — which the app shows you.
• If you take Premium: your subscription's status. Stripe holds your card; we never see or store card numbers.

Garage, company and store staff (Garage Manager, Autowork Recovery, Autowork Parts):

• Your account: your name and email. Your password is kept by Amazon Cognito, our sign-in service; we never store it. If you sign in with Google or Apple, we receive your name and email from them.
• Your role, the teams you belong to, and a log of what you do in a workspace (who changed a job or an invoice, and when).
• The business's details: its name, address, tax number (TRN) and the bank account it shows customers for payment.
• The records the business keeps: its customers' names, phone numbers, emails and addresses, their cars, jobs, quotes, invoices, payments, bookings, photos, voice notes and messages.

Recovery drivers (Autowork Recovery):

• Your truck's location, as explained in the next section.
• Photos you take at pickup and delivery, and the name of the person who received the car.

People who ask a recovery company for help: your name and phone number, where the car is and where it is going, its plate, your notes and photos, your rating, and — if you pay by card — a hold on your card, made and kept by Stripe.

On every app: the device token that lets us send you notifications, the language and display choices you make, and the cookies that keep you signed in. Our servers record technical details such as IP addresses to run the service and keep it secure; for sign-in limits an IP address is stored only as a one-way code.

When you scan a registration card or a document, the photo is read by an AI model to fill in the fields for you. The scan itself is not kept unless you save it as a document.

Drivers' location

Autowork Recovery reads a driver's location only while the driver is signed in to the app, has allowed location "Always", and is working:

• During a job — on the way, at the scene and while towing — about every 15 seconds, including when the phone is locked or another app is open.
• On shift with the jobs screen open and no job, about once a minute, so the office can offer the nearest driver a new job.

We use it to show the truck to the driver's own office and to the customer, on the job's tracking link, while the job is under way, and to find the driver nearest to a new job. We keep only the latest position: each new one replaces the last, and no history of your routes is kept. A job's position is deleted when the job is delivered or cancelled.

You can stop it at any time in your phone's Settings → Autowork Recovery → Location, or by signing out. The office then cannot see your truck or send you the nearest job.

Car owners' location is used only when you ask: to find garages near you (not kept) and to send help to where your car is (kept with that request).

Why we use it

• To run the service: sign you in, keep your records, show a car's history and status, take bookings, send quotes and invoices, take payments, and dispatch and track recovery jobs.
• To send you what you asked for or what the business you deal with sends: sign-in codes, updates about your car or job, reminders and receipts — by WhatsApp, email and notifications. We do not send SMS.
• To keep accounts safe and stop abuse, such as limits on sign-in codes.
• To answer you when you contact us, and to fix and improve the apps.
• To bill for plans and Premium, and to meet our legal duties.

We do not use your data for advertising, we do not sell it or share it with data brokers, and we do not track you across other companies' apps and websites. On our websites in a browser — never in the iPhone or Android apps — we may use Google Analytics to count visits and sign-ups.

Who else handles it

We use these services to run the apps. Each receives only what its job needs:

• Amazon Web Services: hosting, storage, sign-in (Cognito), email (SES), and the AI models that read scanned documents, answer questions in the owners' assistant and draw car pictures (Bedrock).
• Stripe: plans, Premium, card payments to garages and recovery companies, card holds and payouts.
• Google: maps, address search and routes (Google Maps), Sign in with Google, car pictures (Gemini — it receives only make, model, year and colour), and visit counts on our websites (Google Analytics).
• Meta: messages on WhatsApp (WhatsApp Business).
• Google Firebase Cloud Messaging and Apple Push Notification service: notifications to your phone.
• Apple: Sign in with Apple. UAE PASS, where you choose it.
• The US government's vehicle database (NHTSA vPIC): a VIN, to read a car's make and model. Nothing else is sent.

Data is also seen by the people the service is for: the garage or recovery company you deal with, the family members you share a car with, someone you transfer a car to (who sees your first name), and anyone you give a tracking or car-history link to. We disclose data to authorities only when the law requires it.

Where it is stored

Your records are stored in Amazon Web Services' UAE region (me-central-1). Our servers and sign-in service run in its Mumbai region (ap-south-1), which handles your data as you use the apps; emails are sent through its US East region; the AI models run in Mumbai, and car pictures are drawn in the United States. Stripe, Google, Meta and Apple process data in their own locations under their own safeguards.

How long we keep it

• Your account and what is in it: until you delete it, or the business deletes its workspace.
• Sign-in codes: 10 minutes, stored only as a one-way code.
• A driver's position: only the latest one; a job's is deleted when the job ends.
• Car-history links: 30 days. Car transfer offers: 7 days.
• A workspace's records stay until its owner deletes the workspace. Businesses may have to keep invoices for longer under UAE tax law; that is theirs to decide, so export your records before deleting.

Deleting your account

• Garage: open Me, scroll to the end and tap "Delete my app account". This deletes your profile, cars, documents, photos, reminders, shares and links, and cancels Premium. Garages keep their own records of your visits; ask them to delete those.
• Garage Manager, Autowork Recovery and Autowork Parts: open Settings → Your account → Delete account, and type your email to confirm. This deletes your sign-in and takes you off every team. If you own the workspace, it deletes the workspace and everything in it; cancel a paid plan in Billing first.
• Or write to support@garage.autowork.ae from the address on your account, and we will do it for you.

Your rights

Under the UAE's Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) you can ask to see the data we hold about you, to correct it, to delete it, to limit or object to how we use it, and to receive a copy to take elsewhere. You can withdraw a permission you gave — location, notifications, camera — at any time in your phone's Settings. Write to support@garage.autowork.ae; we answer within 30 days. If you are not satisfied, you can complain to the UAE Data Office.

Security

Everything travels encrypted (HTTPS). Each business's records are kept apart and only its own team can open them, by role. Keys to connected services are encrypted at rest. No system is perfectly safe; if a breach affects you, we will tell you and the authorities as the law requires.

Children

The apps are not meant for anyone under 18, and we do not knowingly collect children's data. If you think a child has given us data, write to support@garage.autowork.ae and we will delete it.

Changes to this policy

When we change this policy we update this page and its date. If a change matters to how your data is used, we tell you in the app or by email first.

Contact

Autowork AI — support@garage.autowork.ae