Privacy policy
Last updated: 2026-08-25. This policy explains how Ottoffix processes your personal data (GDPR).
1. Data controller
OTTOFFIX, TODO adresse, 97300 Cayenne, Guyane française. Contact: privacy@ottoffix.com.
2. Data we collect
Account: name, email, phone, role (driver or garage), hashed password.
Vehicles and repairs: registration plate, make/model, service history, attached photos and videos.
Garages: legal name, business number, VAT number, IBAN/BIC for invoicing, opening hours, location.
Usage: in-platform messages, technical logs, IP address, strictly necessary cookies.
3. Purposes and legal bases
Contract performance: account creation, garage search, bookings, quotes, invoices, messaging.
Legal obligation: retention of invoices and accounting records, electronic invoicing.
Legitimate interest: security, fraud prevention, service improvement.
Consent: non-essential email and SMS notifications, precise geolocation.
4. Recipients
The garage handling a request receives the data needed to serve it.
Processors: application and database hosting (EU), Stripe (payments), Resend (transactional email), SMS provider where applicable, and the e-invoicing platform chosen by the garage.
We never sell personal data.
5. Retention
Active accounts: for the duration of use, then deletion or anonymisation within 12 months of closure.
Invoices and accounting records: 10 years (legal requirement).
Technical logs: 12 months maximum.
6. Your rights
Access, rectification, erasure, restriction, objection, portability and withdrawal of consent: write to privacy@ottoffix.com. We reply within one month.
You may lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).
7. Security
Encrypted transport (HTTPS), per-account data isolation enforced in the database, role-based access control, and logging of sensitive operations.
8. Cookies
Only strictly necessary cookies and local storage are used (authentication session, language preference). No advertising cookies.