Company

Privacy Policy

Last updated September 2026

Scope and roles

GarageOS is a shop-management service operated by Mitchell Jeussef Castellanos Fuentes, carrying on business as GABAN Solutions. This policy explains how GarageOS handles personal information. For customer, vehicle, appointment, work-order, inspection, invoice and communication records entered by a shop, the shop decides why the information is collected and used and GarageOS processes it to provide the service. GarageOS separately handles account, billing, security and support information needed to operate its own service.

Information we handle

Depending on how GarageOS is used, information may include account and shop details; names and contact details; customer and vehicle records; appointments; estimates and approvals; work orders; inspection records and photos; invoices, payments and tax information; tire-storage records; email and SMS communications; customer-portal activity; import data; support information; and technical, security and audit data. Payment-card details are handled by our payment provider rather than stored as full card numbers by GarageOS.

Purposes

We use personal information to provide, secure, support and improve GarageOS; authenticate users; process subscriptions and payments; deliver shop-requested email and SMS communications; provide customer-portal and integration features; prevent abuse; troubleshoot problems; maintain records; and meet legal obligations. We do not sell personal information.

Shops and communications

Shops are responsible for the information they enter into GarageOS and for ensuring that their collection and use of customer information and their electronic communications comply with applicable law. GarageOS provides operational and marketing communication tools, but a shop must have the authority or consent required for the messages it sends. Recipients may use the unsubscribe or STOP mechanisms made available for applicable commercial messages.

Website analytics

GarageOS uses first-party, cookie-free page-view analytics on public pages. We record information such as the page viewed, referring site, campaign parameters, device/browser category and country. For approximate unique-visitor counts, the service creates a one-way daily hash derived from network and browser information; the raw IP address is not stored in the analytics record. We do not currently load a third-party advertising or analytics script for this measurement.

Service providers and transfers

We use service providers to operate GarageOS, including providers for hosting and infrastructure, payments, email, SMS, file/media services and integrations selected or enabled by a shop. Personal information may therefore be processed outside Quebec or Canada. We assess applicable privacy risks and use contractual and security safeguards appropriate to the services involved.

Video links in our emails

When GarageOS sends a business email that contains a link to one of our videos, the link carries a random identifier tied to that message. If you open the video page and play the video, we record that fact (whether the page was opened, whether you pressed play, how far the video was watched and whether you clicked a button to ask about a demo) so that the person who wrote to you can follow up appropriately. We use no cookies, no third-party analytics and do not store your IP address or device details for this purpose, and we honour the Do Not Track and Global Privacy Control signals of your browser. You can unsubscribe from our emails at any time, and we stop recording for a contact who has opted out. To ask what we hold about you, use the contact details of our Privacy Officer below.

Safeguards and shop separation

We use administrative, technical and organizational safeguards appropriate to the information we handle, including access controls and separation of shop data. No online service can guarantee absolute security.

Retention and deletion

We retain personal information only as long as reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, security and dispute-resolution requirements. When information is no longer required, it is securely destroyed or, where permitted, anonymized. A shop may request account-data export or deletion, subject to information that must be retained by law or for legitimate legal purposes.

Access, correction and privacy requests

You may ask to access or correct personal information GarageOS holds about you and may make other requests available under applicable privacy law. If the information was provided by a shop about one of its customers, we may direct the request to that shop where appropriate. We may need to verify identity before responding.

Privacy incidents

GarageOS maintains a process for assessing and responding to confidentiality incidents. Where required by law, affected persons and the appropriate privacy authority will be notified.

Privacy Officer

Mitchell Jeussef Castellanos Fuentes
Privacy Officer / Person responsible for the protection of personal information
mcastellanos@garage-os.ca

Contact the Privacy Officer for access or correction requests, privacy complaints, questions about our practices, or concerns about a privacy incident.

Changes

We may update this policy as GarageOS, our providers or applicable requirements change. The current version will be posted here with its update date.