Legal
PRIVACY POLICY
Last updated: June 15, 2026 · Applies to curbsidetoday.com and all Curbside services
Plain English summary: We collect what we need to run the service. We never sell your data or your customers' data. You can ask us to delete everything at any time. We use industry-standard security to protect your information.
1. WHO WE ARE
Curbside ("we," "us," "our") operates curbsidetoday.com, a software platform for auto repair shops to manage vehicle statuses and communicate with customers via SMS. This Privacy Policy explains how we collect, use, and protect information about you and your customers.
For questions about this policy, contact us at carson@curbsidetoday.com.
2. INFORMATION WE COLLECT
We collect two types of information: information about you (the shop) and information about your customers that you enter into the platform.
| What |
Why |
How long kept |
| Shop name, owner name, email, phone, city |
Create and manage your account |
Until account deletion + 30 days |
| Payment information (handled by Stripe) |
Process subscription payments |
Managed by Stripe — we never store card numbers |
| Customer names and phone numbers you enter |
Send status SMS updates on your behalf |
Until you delete them or cancel + 30 days |
| Vehicle information you enter |
Track repair jobs and generate status messages |
Until you delete them or cancel + 30 days |
| SMS message content |
Display conversation history in your dashboard |
Until you delete them or cancel + 30 days |
| Usage data (pages visited, features used, session times) |
Improve the product and fix bugs |
90 days rolling |
| IP address, browser type, device type |
Security, fraud prevention, analytics |
90 days rolling |
3. HOW WE USE YOUR INFORMATION
We use the information we collect to:
- Provide, maintain, and improve the Curbside service
- Send SMS messages to your customers on your behalf
- Generate AI-assisted message drafts using your vehicle and customer context
- Process payments and manage your subscription
- Send you service-related emails (receipts, account alerts, product updates)
- Respond to your support requests
- Detect and prevent fraud or abuse
- Comply with legal obligations
We do not use your data or your customers' data for advertising. We do not sell data to third parties. Ever.
4. SMS MESSAGING AND CUSTOMER DATA
Curbside sends automated SMS text messages to your customers regarding vehicle repair status updates. Here is how we handle SMS data:
- Opt-in: Customers provide their mobile phone number to your shop at vehicle drop-off and verbally consent to receive SMS repair status updates. Consent is obtained before any messages are sent.
- Message types: Messages are transactional only — vehicle status updates such as check-in confirmation, repair progress, and ready for pickup notifications.
- Opt-out: Customers can reply STOP at any time to immediately stop receiving messages. Reply HELP for assistance.
- Message frequency: Varies per visit — typically 1 to 8 messages per repair job.
- Message and data rates: Standard message and data rates may apply to customers receiving SMS.
- Data sharing: Customer phone numbers are transmitted to Twilio solely for the purpose of SMS delivery. We do not share customer phone numbers with any other third parties.
- No marketing: We never send marketing or promotional SMS messages to your customers.
For our full SMS consent and opt-in policy, visit curbsidetoday.com/sms-opt-in.
5. YOUR CUSTOMERS' DATA
When you use Curbside, you enter your customers' personal information (names, phone numbers) into our platform. You are the data controller for your customers' information — we are a data processor acting on your instructions.
This means:
- You are responsible for obtaining proper consent from your customers to contact them via SMS
- You are responsible for honoring your customers' requests to stop receiving messages
- We will process your customers' data only as directed by you through your use of the Service
- We will never contact your customers directly for our own marketing purposes
6. THIRD-PARTY SERVICES
Curbside uses the following third-party services to operate. Each handles data according to their own privacy policies:
- Twilio — SMS delivery. Phone numbers and message content are transmitted to Twilio to send texts. Twilio Privacy Policy
- Anthropic (Claude) — AI message drafting. Vehicle status and customer first name are sent to Anthropic's API to generate SMS drafts. Anthropic Privacy Policy
- Stripe — Payment processing. Handles all credit card data. We never see or store your full card number. Stripe Privacy Policy
- Supabase — Data storage. Your shop and vehicle data is stored in Supabase's hosted Postgres database. Supabase Privacy Policy
- Vercel — Website hosting. Hosts the Curbside web application.
7. DATA SECURITY
We take security seriously. Our measures include:
- All data is transmitted over HTTPS with TLS encryption
- Database access is restricted and requires authentication
- API keys and credentials are stored as environment variables, never in code
- Supabase Row Level Security ensures shops can only access their own data
- We never store credit card numbers — Stripe handles all payment data
- We conduct periodic security reviews
No system is 100% secure. If we become aware of a data breach that affects you, we will notify you within 72 hours by email.
8. YOUR RIGHTS
You have the right to:
- Access — Request a copy of all data we hold about you and your account
- Correction — Ask us to correct inaccurate data
- Deletion — Request deletion of your account and all associated data
- Export — Request an export of your data in a machine-readable format (CSV)
- Opt-out — Unsubscribe from marketing emails at any time
To exercise any of these rights, email carson@curbsidetoday.com. We will respond within 30 days.
9. DATA RETENTION
We retain your data for as long as your account is active. When you cancel your account:
- Your data remains accessible for 30 days in case you want to reactivate
- After 30 days, all your data is permanently and irreversibly deleted from our systems
- Some anonymized, aggregated data may be retained indefinitely for product analytics
You can request immediate deletion at any time by emailing carson@curbsidetoday.com.
10. COOKIES
We use minimal cookies, limited to:
- Session cookies — Keep you logged in while using the dashboard. Expire when you close your browser.
- Preference cookies — Remember settings. Expire after 12 months.
We do not use advertising cookies or tracking pixels.
11. CHILDREN'S PRIVACY
Curbside is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at carson@curbsidetoday.com and we will delete it promptly.
12. CALIFORNIA PRIVACY RIGHTS (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, disclose, and sell (we don't sell)
- The right to delete your personal information
- The right to opt-out of the sale of personal information (we don't sell personal information)
- The right to non-discrimination for exercising your CCPA rights
To exercise your CCPA rights, contact us at carson@curbsidetoday.com.
13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of significant changes by email at least 14 days before they take effect.
14. CONTACT US
Questions, concerns, or requests about your privacy: