HelpWhere your records live

Where your records live

Who can read your shop’s data, where it sits, and what we do not do with it.

Where it is

  • On servers in the United States, in a database your shop is the only reader of.
  • That separation is enforced by the database itself rather than by the app, and it is checked automatically on every deploy: two shops cannot see each other even if the app has a bug.
  • Photos sit in private storage. A photo is reached through a link that expires five minutes after it is made, so a link that leaks is a link that has already stopped working.

Who can read it

  • The people you have added to your shop, and nobody else.
  • Our own operator screen shows counts, dates and whether your records are healthy. It cannot show a customer, a plate, a photo or a fee.
  • If we ever need to look at your shop to fix something, that means signing in to your shop — and that sign-in is in your own log, where you can see it.

What we do not do

  • We do not sell, share or publish your shop’s data, and that includes what you charge for storage. It is in the agreement, not just on this page.
  • There is no advertising on anything your customers see, and no third-party tracking on the signed-in screens.

How long it is kept

  • A founding shop that decides against subscribing goes read-only: every set, every photo and all the history stays there to read and to export, for as long as you want it. Nothing is deleted for not subscribing.
  • A subscription you cancel is the other case: your records stay reachable for 30 days so you can export them, and we write to you before that window closes. After that they are deleted, photographs included — or sooner if you ask.
  • While a shop is running, nothing is deleted: a set is returned, abandoned or voided with a reason, and the record of it stays. That is the point of it.

Your customers’ own data

  • A name, a phone number, a plate and a car. That is what a tire storage record needs and it is all that is asked for.
  • A customer who asks you to remove their details is handled the way everything else here is: nothing is deleted outright, because a record that can be quietly removed is not a record — but a set can be closed and a person marked so nothing goes out to them.
  • The full privacy statement is at /legal/privacy and the agreement at /legal/terms.

The rest of the help

Everything Treadstock can be asked, split by what you came to find out.