Privacy Policy

Cerda's Auto Service (“Cerda,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website, use our mobile application, or interact with the Cerda autoshop management platform (collectively, the “Services”).

By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, do not access or use the Services.

1. Information We Collect

We collect information that you provide to us directly, information collected automatically when you use the Services, and information we receive from third parties.

1.1 Information You Provide

• Account information: name, email address, phone number, employer or organization, role (e.g., fleet administrator, claims user, mechanic, dispatcher), and login credentials.
• Vehicle information: VIN, make, model, year, mileage, license plate, service history, and related vehicle records.
• Service information: repair requests, work orders, parts orders, photos, diagnostic notes, invoices, and other content you submit through the Services.
• Payment information: billing address and limited payment details processed by our third-party payment processors. We do not store full payment card numbers on our servers.
• Communications: messages, chat content, attachments, and any feedback or support requests you send to us.

1.2 Information Collected Automatically

• Device and usage data: IP address, device identifiers, operating system, browser type, app version, pages or screens viewed, and timestamps.
• Location data: approximate or precise location from your device when you grant permission, used for features such as roadside assistance, dispatch, and shop discovery.
• Cookies and similar technologies: session cookies, persistent cookies, and similar identifiers used to operate, secure, and improve the Services.
• Audit and security logs: records of authentication events, configuration changes, and other activity required to operate and secure the platform.

1.3 Information from Third Parties

We may receive information about you from your employer or fleet organization, service providers, identity verification or background check vendors, and analytics or advertising partners.

2. How We Use Your Information

• To provide, operate, and maintain the Services.
• To create and manage accounts, authenticate users, and enforce role-based access controls.
• To process work orders, parts inventory, dispatch, invoicing, and related transactions.
• To communicate with you, including sending service-related notifications, updates, and support responses.
• To monitor, secure, and improve the Services, including detecting and preventing fraud, abuse, and unauthorized access.
• To analyze usage and performance and develop new features.
• To comply with legal obligations, enforce our Terms of Use, and protect our rights and the rights of others.

3. How We Share Information

The platform is multi-tenant and role-based. We share information as reasonably necessary to deliver the Services:

• Within your organization: with users in your organization who have a legitimate need to access the relevant data, based on their assigned role.
• Between authorized parties: with the fleet organization, autoshop, or service provider involved in a particular work order, repair request, or invoice.
• Service providers: with vendors that support hosting, storage, analytics, communications, payment processing, and customer support, subject to appropriate confidentiality and security obligations.
• Legal and safety: when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Cerda, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of all or part of our business, subject to standard confidentiality protections.

We do not sell personal information for monetary consideration.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, measure usage, and improve the Services. You can control cookies through your browser settings; however, disabling cookies may affect the functionality of the Services.

5. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Work order records, invoices, and audit logs may be retained for longer periods to satisfy tax, accounting, and regulatory requirements.

6. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and continuous monitoring. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, update, port, or delete personal information we hold about you, and to opt out of certain uses or disclosures. To exercise these rights, contact us using the information below. We will respond consistent with applicable law.

California residents: the California Consumer Privacy Act (CCPA/CPRA) provides California consumers with specific rights regarding their personal information, including the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

8. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us so we can delete it.

9. International Users

The Services are operated in the United States. If you access them from outside the United States, you consent to the transfer and processing of your information in the United States and other jurisdictions where our service providers operate.

10. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” at the top of this page and, where appropriate, notify you through the Services or by other means. Your continued use of the Services after the changes take effect constitutes your acceptance of the updated Policy.

12. Contact Us

If you have questions or requests regarding this Privacy Policy or our privacy practices, please contact us: