Protecting your personal data matters to us. This policy explains how CarSpike (operated by Jan Petry Professionals) collects, processes, and protects personal data under the EU GDPR (Regulation (EU) 2016/679).
1. Controller
Jan Petry Professionals (sole proprietorship)
Römerstraße 64
54329 Konz, Germany
Email: info@jpprofessionals.de
2. Data we process
- Account data: email, name, authentication data (password hash or OAuth identity if you use Google/Apple).
- Vehicle & usage data: brand, model, year, plate, VIN, color, body type, mileages, expenses, maintenance schedules/tasks you enter.
- Subscription data: premium flag, Stripe customer/subscription IDs (we do not store full card numbers).
- Communication preferences: email/push notification settings.
- Technical data: IP address, browser/device info, timestamps, error and performance metrics (hosting/analytics).
3. Purposes & legal bases (Art. 6 GDPR)
- Contract (Art. 6(1)(b)): providing the service (account, garage, costs/mileage/maintenance) and Pro subscriptions.
- Legitimate interests (Art. 6(1)(f)): security, abuse prevention, reliability and product improvement (including Vercel Analytics / Speed Insights in aggregated form).
- Consent (Art. 6(1)(a)): optional push notifications (OneSignal) and optional marketing/product emails — withdrawable in settings or browser/OS.
- Legal obligation (Art. 6(1)(c)): where retention or disclosure duties apply.
4. Processors / services we use
- Supabase Inc. – authentication, PostgreSQL database, API (EU region where configured). Stores account and app data.
- Stripe – payment processing for CarSpike Pro (Checkout, Customer Portal, webhooks). Card data is handled by Stripe; we do not store full card details. See Stripe Privacy.
- Vercel Inc. – web hosting, CDN, Vercel Analytics and Speed Insights. See Vercel Privacy.
- OneSignal, Inc. – optional web push (when enabled). May link an external ID to your CarSpike user id. See OneSignal Privacy.
- Google / Apple – only if you sign in with OAuth.
Transfers outside the EEA may occur depending on provider infrastructure. We use EU regions where available and appropriate safeguards (e.g. SCCs / DPF as applicable).
5. Subscriptions
Basic is free (limited vehicles). Pro is a paid monthly plan (currently €4.99/month) billed via Stripe. Cancellation is handled in the Stripe Customer Portal; premium status follows Stripe subscription events.
6. Cookies & similar tech
Essential cookies for auth/session and locale. Analytics/performance via Vercel. OneSignal may use storage and a service worker if push is enabled. Strictly necessary cookies are set without consent; optional tracking is limited as required by law.
7. Retention
We keep data while your account is active and as needed for the service. After account deletion, personal data is deleted or anonymized unless legal retention (e.g. invoicing via Stripe) applies.
8. Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You can delete your account in Settings. You may lodge a complaint with a supervisory authority (e.g. the Rhineland-Palatinate DPA in Germany).
9. Security
TLS, access control (including Supabase RLS), and restricted server credentials. No method is 100% secure.
10. Children
CarSpike is not directed at children under 16. We do not knowingly collect data from minors under 16 without a parent/guardian.
11. Changes
We may update this policy when features or processors change. Material updates will be communicated appropriately.
12. Contact
Privacy requests: info@jpprofessionals.de
Last updated: July 2026