Privacy Policy

Last updated: October 2, 2026

GarageForge is operated by DerMar Consulting Group LLC (doing business as ForgeWorks), 3151 Cape Horn Rd, Unit #2092, Red Lion, PA 17356, USA. Questions: info@mygarageforge.com.

1. Overview

GarageForge, operated by DerMar Consulting Group LLC (doing business as ForgeWorks) ("we," "us," or "our"), is the inspection station & repair shop management platform at mygarageforge.com. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data. By using GarageForge, you agree to the practices described here.

2. Information We Collect

Account and Business Information

  • Company name and subdomain
  • Account administrator name, username, and email address
  • Technician and staff names and contact information you enter
  • Billing address and payment method (handled by Stripe — we do not store full card numbers)

Operational Data

  • Customer contact information, vehicle details (VIN, plate, make/model), and service notes you upload
  • Repair order and inspection history, and appointment timestamps
  • Inspection and repair-order photos uploaded by technicians
  • Technician notes and repair-order status records

Usage and Technical Data

  • IP addresses and device information when you access the Service
  • Log data including pages visited, actions taken, and timestamps
  • Browser type and operating system

3. How We Use Your Information

  • To provide, operate, and improve the Service
  • To process payments and manage your subscription
  • To send transactional emails (account verification, billing receipts, payment failure notices)
  • To schedule appointments and manage your service calendar
  • To respond to support requests and communicate about the Service
  • To detect and prevent fraud and abuse
  • To comply with legal obligations

We do not sell your data or use it for advertising purposes.

4. Third-Party Services

We use the following third-party services to operate GarageForge. Each has its own privacy policy governing their use of your data:

Stripe

Payment processing and subscription management. Stripe receives your billing address and payment method. We never see or store your full card number. stripe.com/privacy

Google Analytics

Visit statistics for our public website pages (home page, pricing, sign-up and sign-in pages, legal pages). Google receives the page's path without any query string, the referring page without its query string, basic interactions with the page (scrolling, clicks on links to other sites or on downloads, and that one of our forms was started or sent, never what you type into it), and your browser and device details and IP address, and sets analytics cookies (see section 9). It is not loaded inside the app you use after signing in. policies.google.com/privacy

Cloudflare

Network protection for our domain and the "are you human" check (Turnstile) on the sign-up page, which receives your IP address and browser signals to tell people from bots; photo storage (R2) when enabled. cloudflare.com/privacypolicy

Google Fonts

Our pages load their typefaces from Google Fonts, which receives your IP address and browser details when a page loads. policies.google.com/privacy

Resend

Transactional email delivery. Your email address is shared with Resend solely to deliver system emails (verification, billing, invitations). resend.com/legal/privacy-policy

Telnyx

Text-message (SMS) delivery for inspection-due reminders, appointment reminders, and two-way messaging. When these features are used, the recipient's phone number and the message content are shared with Telnyx solely to deliver the message. telnyx.com/privacy-policy

Anthropic

Optional AI-assisted labor/repair estimates. When you use an AI feature, the vehicle and job details for that request are sent to Anthropic's API to generate the estimate. Anthropic does not train its models on data submitted through its API. anthropic.com/legal/privacy

NHTSA vPIC

VIN decoding uses the free public U.S. National Highway Traffic Safety Administration vehicle database. Only the VIN is sent; no customer personal information is transmitted. vpic.nhtsa.dot.gov

Hetzner Cloud

Server infrastructure and data storage. Your data is stored on servers located in the European Union (Falkenstein, Germany). hetzner.com/legal/privacy-policy

5. Data Retention

We retain your data as long as your account is active. Specific retention periods:

  • Repair order and inspection history, and photos: kept for as long as your account exists, on every plan
  • Account and billing records: retained for the duration of your account plus 7 years for tax/legal compliance
  • Server logs: retained for 30 days

If your subscription ends, your account and records are kept and you can still sign in to view and export them. You can download all of your data at any time from the Billing page ("Download all my data"). To have your account and its operational data (repair orders, customers, vehicles, inspections) deleted, email info@mygarageforge.com; we delete it within 30 days of your request.

6. Your Customer Data

You are the data controller for customer information you upload to GarageForge (contact information, vehicle details, etc.). You are responsible for ensuring you have a legal basis to store and process that information. GarageForge processes this data only as a data processor acting on your instructions.

When you send your customers text messages or emails through GarageForge (for example inspection reminders), their phone number or email address and the message go to Telnyx or Resend (section 4) to deliver it. You should disclose this to your customers if required by applicable privacy law.

7. Security

We use industry-standard security measures including encrypted HTTPS connections, hashed passwords, and access controls. Inspection and repair-order photos are stored with access controls. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.

8. Your Rights

Depending on your location, you may have rights regarding your personal data, including:

  • Access to the personal data we hold about you
  • Correction of inaccurate data
  • Deletion of your account and associated personal data
  • Export of your data in a machine-readable format
  • Objection to certain processing activities

To exercise any of these rights, contact us at info@mygarageforge.com. We will respond within 30 days.

9. Cookies

GarageForge does not use advertising cookies. Our public website pages use Google Analytics, which sets first-party analytics cookies (named _ga and _ga_<ID>, kept for up to about two years) to count visits and tell new visitors from returning ones. We send Google only the page's path, never its query string, so sign-in, password-reset and invitation links are not shared with Google. You can block these cookies in your browser settings, or opt out of Google Analytics with Google's browser add-on at tools.google.com/dlpage/gaoptout; the site works the same either way.

Inside the app we use browser localStorage to keep you signed in (your authentication token and user session). This stays on your device and is not sent to any third party. The sign-up page's Cloudflare Turnstile check may store its own data in your browser to tell people from bots.

10. Children's Privacy

GarageForge is a business tool and is not directed at individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the Service. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

Questions about this Privacy Policy or your data? Contact us at info@mygarageforge.com.