How we handle your data under Jamaica's Data Protection Act 2020.
Contact details (phone, email), account information, vehicle details, reminder dates, document details and files you upload, support-request details, payment and subscription records, and - where a specific workflow requires it - limited verification or ticket or portal information you provide. We collect this to run your Garage, send reminders, store documents, support operator-assisted requests, and maintain basic security and payment records.
If you use AutoTrust without signing in, your vehicle and reminder information is stored locally in your browser on your own device. It is not transmitted to or held by AutoTrust, and we are not the data controller for information that never leaves your device.
When you sign in, your vehicles, compliance dates, uploaded documents and related records are stored securely in our cloud database so they can sync across your devices. For this cloud-stored data, AutoTrust acts as the data controller under the DPA 2020. Access is restricted to your own account through row-level security, and AutoTrust staff access it only for support or regulatory-compliance purposes. We rely on infrastructure and communications providers (such as Supabase, Vercel, Resend, Meta/WhatsApp and Telegram) that process data on our behalf as service providers; some of this infrastructure may be located outside Jamaica, and we take reasonable steps to keep your data protected.
When you use AutoTrust's document storage feature, files you upload (certificates of fitness, registration certificates, insurance documents, etc.) are stored securely and used to provide the document vault, build your vehicle history, and enable reminder features. When you ask AutoTrust to read a file, it is sent once to our AI service provider to suggest visible dates and vehicle details. Those suggestions do not update your vehicle until you review and save them. We do not verify the authenticity or accuracy of uploaded documents, and you must confirm any document details before they are relied on. Documents are retained for as long as your account is active and are deleted upon account deletion or on your request. AutoTrust staff may access stored documents only for support, a test you authorize, or regulatory compliance purposes.
Renewal dates you enter (registration, fitness, insurance) are stored and used to generate reminder notifications. These dates are not shared with government agencies, insurers, or any third party except where required by law. The accuracy of reminders depends on the dates you enter - AutoTrust does not independently verify expiry dates against government records.
If you choose bank transfer, you may upload a screenshot, image, or PDF receipt so AutoTrust can match your payment reference and amount against the settled bank entry. These files may contain transaction details, so they are stored in a private payment-proof area and are available only to your account and authorized AutoTrust operators reviewing the payment. Uploading a receipt does not by itself confirm payment or activate service. Payment proofs and their review records may be retained for payment reconciliation, fraud prevention, disputes, accounting, and legal obligations, then deleted when no longer required.
We record timestamps and related audit details for consent-based workflows such as document uploads, support requests, payment activation, and other account actions that need a service or security trail. Where consent is the lawful basis, you may withdraw it, but that may prevent us from providing the feature that depended on that consent.
We process data to provide the service you request, secure the platform, meet legal obligations, and - where appropriate - based on consent. You may request access to, correction of, or deletion of your data, and you may withdraw consent for optional processing at any time.
AutoTrust uses cookies or local browser storage for core functions such as sign-in state, demo/session preferences, referral or source attribution, and your cookie-consent choice. If you accept analytics cookies, we may also use measurement and retargeting tools such as PostHog and Meta Pixel to understand site usage and advertising performance. Those optional analytics and advertising tools are not switched on until you accept them.
Some optional features may use AI service providers to help extract details from a document you upload or draft a message reply for review. When those features are enabled, the relevant document image, PDF, or message content may be processed by that provider only for the requested feature. AI output can be wrong, so you or our team must review important details before relying on them.
We share only what is necessary with licensed lenders, insurers, attorneys and inspectors to deliver the service you request. We do not sell your personal information. Aggregated, de-identified valuation data may be used to build market indices.
Data requests: adam@apeirondp.com