1. Introduction

Locomotion Automatic Transmissions ("Locomotion," "we," "our," or "us"), located at 1721 Susan Dr, Arlington, TX 76010, operates the Locomotion OS platform ("Service"), a cloud-based automotive repair shop management system. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use our web application, APIs, and related services.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account or are added by a shop administrator, we collect:

• Full name, email address, and phone number
• User role (e.g., technician, service advisor, manager, owner)
• Login credentials (passwords are hashed and never stored in plain text)

2.2 Business Information

• Shop name, location(s), and legal entity details
• Bay assignments and shop floor configuration
• Staff assignments and operational preferences

2.3 Operational Data

In the course of using the Service, you and your team enter:

• Work orders (repair orders), including customer complaints and technician notes
• Vehicle information (year, make, model, VIN, mileage)
• Customer records (name, phone, email)
• Parts and labor line items, pricing, and approval status
• Invoices and financial records
• Diagnostic notes and repair recommendations

2.4 Photos & Evidence

• Intake and inspection photographs uploaded during the repair process
• Quality control evidence images required before phase advancement

2.5 Payment Data

Payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers, CVVs, or full payment account numbers on our servers. We retain only transaction references, amounts, and status for record-keeping.

2.6 AI-Generated Data

When you use AI-powered features (such as repair cost estimates or diagnostic suggestions), the Service sends relevant work order and vehicle data to third-party AI providers to generate results. The AI-generated outputs are stored within your account. See Section 5 for details on AI processing.

2.7 Automatically Collected Information

• Usage data (pages visited, features used, time spent)
• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Cookies and session tokens (see Section 7)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process work orders, invoices, and related transactions
• Generate AI-powered repair estimates and diagnostic suggestions
• Enforce workflow gates, quality controls, and audit trails
• Send technical notices, security alerts, and support messages
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations and enforce our terms

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• With your consent or at your direction
• Service providers who assist in operating the Service, under strict confidentiality agreements (see Section 6)
• Legal obligations — to comply with applicable law, regulation, legal process, or enforceable governmental request
• Protection of rights — to protect the safety, rights, or property of Locomotion, our users, or the public
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users

5. AI & Automated Processing

Locomotion OS uses artificial intelligence to provide repair cost estimates and diagnostic suggestions. When these features are used:

• Relevant work order data (vehicle info, complaint descriptions, historical repair data) is sent to third-party AI providers for processing
• AI-generated outputs (estimates, suggestions) are presented as recommendations only — no automated decisions are made without human review and approval
• Your data is not used to train third-party AI models; it is processed on a per-request basis
• You may use the Service without AI features; AI-powered estimates are optional

6. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — database hosting, authentication, and row-level security
• Stripe — payment processing (subject to Stripe's Privacy Policy)
• Vercel — application hosting and content delivery
• DeepSeek / OpenRouter — AI inference for repair estimates and diagnostics
• Tekmetric — data import integration for migrating existing shop records

Each provider processes data in accordance with their own privacy policies. We select providers that maintain appropriate security standards and enter into data processing agreements where applicable.

7. Cookies & Tracking Technologies

Locomotion OS uses the following cookies and similar technologies:

• Session cookies — to maintain your authenticated session while using the Service
• Authentication tokens — securely stored to verify your identity across requests
• Preference cookies — to remember your settings (e.g., selected entity, view mode)

We do not use third-party advertising cookies or cross-site tracking technologies. We do not participate in ad networks or sell data to advertisers.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit via HTTPS/TLS for all connections
• Encryption at rest for stored data
• Row-level security (RLS) ensuring users can only access data within their organization
• Role-based access controls limiting data visibility by user role
• Secure password hashing (never stored in plain text)
• Regular security audits and monitoring
• Audit trails for sensitive operations (phase changes, overrides, approvals)

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information, subject to legal retention requirements
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain processing of your information
• Withdraw consent — where processing is based on consent, withdraw it at any time

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information — we do not sell your personal information
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at laurence@fyves.com. We will respond within 30 days (or as required by applicable law).

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained while your account is active; deleted upon request after account closure
• Work orders and operational data — retained for the duration of your subscription and a reasonable period afterward for business continuity
• Financial records (invoices, payment records) — retained for a minimum of 7 years to comply with tax and accounting regulations
• Audit logs — retained for a minimum of 3 years for compliance and dispute resolution

When data is no longer needed, we securely delete or anonymize it.

11. International Data Processing

The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.

12. Children's Privacy

The Service is designed for use by automotive repair businesses and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the effective date. For significant changes, we may also provide notice through the Service or via email.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: