Privacy Policy

This policy explains what information My Ally collects, how it is used, who it is shared with and the choices you have. It covers people who use My Ally (shop owners and their teams) and the shop customers whose details are stored in it. For customer details, the shop that added them decides how they are used, and we process them on the shop’s behalf.

• Account details: your email address, password (stored only in scrambled form), name, phone, business name and address, and your preferences.
• Store and team details: the stores you belong to, your role, and invitations you send or receive.
• Customer details added by shops: names, email addresses, phone numbers, vehicle information, requested services and messages, including quote requests sent through website forms connected to My Ally.
• Content you create: email drafts, quotes, AI chats, uploaded files, flyers, brand kits, images and fonts.
• Usage information: which AI features are used and how much, to manage limits and costs, plus basic technical logs used to keep the service secure.

• To provide My Ally: sign you in, show your store's data to your team, generate drafts, quotes and flyers, and send invitation and reminder emails.
• To keep the service secure, including preventing spam form submissions and unauthorized access.
• To support you when you contact us.
• To understand usage and improve features.

When you use an AI feature, the prompt you write and any content you include, which can contain customer names, contact details, vehicle and quote information, or files you attach, is sent to an AI provider to produce the result. We route text requests through OpenRouter, which forwards them to the model provider you or the app selects (for example OpenAI, Anthropic or Google). Image generation uses Pollinations.

• Only the information needed for that request is sent.
• We do not sell your data, and we do not use customer details to train our own models.
• AI providers handle the data under their own terms and privacy policies. Some may keep requests for a short time for abuse monitoring.
• If you prefer not to share a customer's details with an AI provider, leave them out of the prompt.

We share information only with service providers that help us run My Ally, and only for that purpose:

• Supabase: database, sign-in and file storage.
• Netlify: hosting of the app and website forms.
• Resend: sending invitation and reminder emails.
• NHTSA, the U.S. Department of Transportation vehicle database: decoding VIN numbers. Only the VIN is sent.
• Materials lookups send the item and your business ZIP code (not customer details) to our AI provider, which may search public store websites for prices.
• OpenRouter and the AI model providers it connects to, and Pollinations: AI features, as described above.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a sale or reorganization of the business. Inside My Ally, a store’s data is visible only to members of that store.

My Ally is operated from the United States, and our service providers store and process information in the United States. If you use My Ally from outside the United States, your information will be transferred there and handled under United States law.

• Account, store and customer information is kept while the account or store is active.
• Saved AI chats and generated images expire automatically, with an email reminder 7 days before deletion.
• When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep it for legal, security or billing reasons.

Data is sent over encrypted connections and access is limited by account and by store. Passwords must be at least 8 characters. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect a problem.

You can view and update your profile in Settings at any time. To access, correct or delete your personal information, get a copy of it, close your account, or withdraw consent, email support@myallyai.app. We will confirm your request within 10 days and respond within 30 days, or within the shorter time your state law requires. We will not treat you differently for exercising your rights.

You may have an authorized agent make a request for you, and we may ask you to verify your identity first. If we deny a request, you can appeal by replying to our decision, and we will answer the appeal within the time your state law requires.

If you are a customer of a shop that uses My Ally, please contact that shop first, since it controls your information. We will help the shop respond to your request.

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with consumer privacy laws have rights to know, access, correct, delete and port their personal information, and to opt out of its sale, sharing for targeted advertising, and profiling. You can use these rights as described above.

• We do not sell personal information and do not share it for cross-context behavioral or targeted advertising. We have not done so in the past 12 months.
• We do not use personal information for profiling that produces legal or similarly significant effects.
• We honor Global Privacy Control (GPC) browser signals as an opt-out request, although we do not sell or share data to begin with.
• The categories of information we collect, where it comes from, why we use it and who receives it are listed in the sections above.

My Ally does not ask for or intend to collect consumer health data as defined by the Washington My Health My Data Act (RCW 19.373). Please do not enter health information about yourself or your customers. If any is entered by mistake, email support@myallyai.app and we will delete it.

My Ally uses only the browser storage needed to keep you signed in and remember preferences such as light or dark theme. We do not use advertising cookies, third-party ad trackers or cross-site tracking.

My Ally is a business tool and is not intended for anyone under 16. We do not knowingly collect personal information from children under 13, as defined by the Children’s Online Privacy Protection Act (COPPA). If you believe a child has given us information, email support@myallyai.app and we will delete it.

We may update this policy. If a change is significant we will notify you in the app or by email before it takes effect. The date at the top shows when it was last updated.

For privacy questions or requests, email support@myallyai.app. My Ally is operated from Vancouver, Washington, USA.