Privacy Policy
Last updated 24 October 2026
This explains what AutoDX, which is operated by SentinelGrid, collects, where it goes, and what we will not do with it. Plain language, because a shop owner should be able to read this in five minutes.
The short version. We do not sell your data. We do not use your shop's repair history to train AI models. Every shop lives in its own separate database. Your customers' details go to an AI provider only when you use an AI feature, only for that request, and only to the provider whose key your shop added.
1. Two kinds of people in this policy
AutoDX holds information about two groups, and the difference matters:
- You, the shop. Owners, advisors and technicians with accounts. We are the controller of that information.
- Your customers. Vehicle owners whose names, phone numbers and vehicles you enter into repair orders. That is your data about your customers. You are the controller; we are your processor and we handle it on your instructions.
If a vehicle owner asks us directly to see or delete their information, we will point them to the shop, because the shop owns that relationship.
2. What we collect
| What | Examples | Why |
|---|---|---|
| Account | Name, email, shop name, phone, password (hashed) | To create your shop and sign you in |
| Shop content | Repair orders, complaints, diagnoses, fixes, parts, labor, appointments, estimates, notes | It is the product |
| Your customers | Name, phone, vehicle year/make/model, VIN | To attach work to a vehicle and send status links |
| Billing | Plan, status, invoices, AI usage counts | To bill you correctly. Card details go to Stripe, never to us |
| Technical | IP address, browser, timestamps, error logs | Security, rate limiting, fixing faults |
We do not ask for and do not want payment card numbers, government IDs, or health information. Please do not type them into a repair note.
3. AI processing, in detail
This is the part shops most often want to understand, so here it is precisely.
When someone in your shop asks for a diagnosis, builds an AI estimate, or generates a plain-English explanation for a customer, AutoDX sends a request to an AI provider. That request contains the complaint text, the vehicle, and excerpts from your shop's most similar past repairs, which can include a prior customer's name if it appears in a note.
That request goes to the provider whose API key your shop added in Admin (Anthropic, OpenAI or Google), on your shop's own account with that provider. AutoDX does not run AI on a provider account of its own today.
Once a request reaches that provider, the provider's terms and your account's settings govern what happens to it, not this policy. That includes how long the provider keeps it and whether the provider may use it to improve its models. Read those terms before you add a key. We do not train AI models on your content ourselves.
If you would rather no shop content ever leaves the server, choose the Built-in (no external AI) provider in Admin. It returns clearly labelled sample output and makes no external request.
4. Who else touches your data
We use a small number of sub-processors, all of them because the product needs them:
| Who | For | Receives |
|---|---|---|
| Stripe | Payments and invoices | Your billing contact and card details, which go to Stripe directly |
| Twilio | Customer status texts, if enabled | The recipient phone number and message |
| Cloudflare | Serving the site securely | Connection metadata |
| NHTSA | VIN decode and recall lookups | The VIN only. No personal details |
The AI provider your shop connects with its own key is not on this list because it is not our sub-processor: your shop holds the account and the relationship with it, as section 3 explains.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done either.
5. Where it lives
AutoDX is hosted in the United States. Every shop gets its own database rather than a shared table with a shop id column, so one shop's records cannot be returned to another by a query mistake. AI provider keys you enter are encrypted before they are stored.
6. How long we keep it
- While you are a customer: for as long as your shop is active.
- After a trial ends or a subscription lapses: 90 days, read-only, so you can come back and find everything where you left it. After that we may delete it permanently.
- Billing records: kept as long as tax and accounting law requires.
- Logs: a short rolling window, typically weeks.
7. Your rights
Depending on where you live, including under the Florida Digital Bill of Rights and similar state laws, you may have the right to know what we hold, get a copy, correct it, delete it, or object to certain processing. Write to [email protected] and we will respond within the time the law allows. We will not charge you or degrade your service for exercising a right.
A note on the difference between a legal right and a paid feature: bulk export of your shop's operational records into a file is a feature of a paid plan. A request for a copy of personal information under privacy law is a right, it is free, and it does not depend on your plan.
8. Security
Passwords are hashed. Sessions are signed and cookies are secure. State-changing requests carry a CSRF token. Provider keys are encrypted at rest. Access to production is limited to people who need it. No system is perfect; if a breach affects you we will tell you promptly and explain what happened.
9. Children
AutoDX is business software and is not directed at anyone under 18. We do not knowingly collect information from children.
10. Changes
If we change this policy in a way that materially affects you, we will give notice by email or in the app before it takes effect. The date at the top always reflects the current version.
11. Contact
SentinelGrid, Seminole County, Florida.
[email protected]
See also the Terms of Service.