Supreme Auto Glass — Privacy Policy

Version 1.2 · Effective 2026-10-08

This Privacy Policy explains how Supreme Auto Glass Inc. ("Supreme Auto Glass", "we", "us") collects, uses, shares and protects information when you use the Supreme Auto Glass app and request our mobile auto glass services. When you create an account you acknowledge this Policy; your acknowledgement is recorded with the version number and date.

1. Information We Collect

• Account information: name, email address, password (stored only as a one-way hash) or Sign in with Apple identifier, phone number, preferred language, profile photo if you add one, and your customer ID.
• Contact and location details: service address and ZIP code where the vehicle will be serviced. We do not track your device's GPS location.
• Vehicle information: year, make, model, body style, trim, VIN, glass type and features, and license plate if you choose to include it in notes or photos.
• Quotes, appointments and service records: quote requests, prices, discounts, acceptance/decline decisions, appointment windows, status history, technician notes, warranty claims and insurance-assistance requests.
• Photos and uploads: VIN label photos you scan, images you attach to a request or warranty claim, and your profile photo.
• Identification information: for card payments, and where otherwise reasonably required, a photo of a government-issued ID of the person authorizing payment.
• Electronic signatures: the signature image you draw on the technician's device, with its date and time.
• Payment-related information: amounts, tax and fees, payment method, and for card payments the limited details returned by Square (card brand, last four digits, Square payment reference and receipt link). We never receive or store your full card number or security code.
• Insurance information: insurer, policy or claim reference and payment status when you ask us to bill insurance.
• Invoices, transaction and accounting records: receipts, transaction IDs and the accounting entries that document completed work.
• Referral and promotion information: eligibility for and use of promotions such as the new-customer discount and the referral program (who referred whom, qualifying service status and credits issued).
• Communications: in-app notifications, emails we send you, support requests and messages you send us.
• Device and notification data: push-notification device tokens, platform (iOS/Android/web) and app version.
• Security and audit logs: sign-in events, active sessions, admin actions on your record, consent records (including IP address, platform, app version and user agent at the time of consent), and webhook/payment events.
• Analytics and usage information: aggregated metrics about quotes, conversions, revenue and app usage that we compute from the records above to run the business. We do not currently use third-party advertising trackers.

2. How We Collect Information

Directly from you when you create an account, request a quote, scan a VIN, schedule service, sign, pay, or contact us; from our technicians when they record the service, ID photo and signature; automatically from your device (notification tokens, platform, app version, IP address); from Square when a payment is processed; and from public sources such as the NHTSA VIN database.

3. How We Use Information

To create and secure your account; prepare, send and update quotes; schedule and perform service; process payments and issue invoices and receipts; verify identity and prevent fraud; handle warranty and insurance requests; send transactional notifications; respond to support requests; run analytics to improve pricing, scheduling and service quality; comply with legal and tax obligations; and establish or defend legal claims.

4. Vehicle and Service Information

Vehicle data (including VIN) is used to identify the correct glass part and features and to maintain your service history and warranty records. VINs are sent to the NHTSA decoding service and, when you scan a label, the label image is processed by an AI reading service to extract the VIN; the image is used only for that purpose.

Vehicles from your quotes are saved to your account ("Your vehicles") so you can reuse them for future requests; you can remove a saved vehicle at any time from the quote form. Removing a saved vehicle hides it from your list but does not change the vehicle information recorded on existing quotes, appointments, invoices or service records, which we retain as described in Section 19.

5. Photos and Uploaded Information

Photos you upload are stored in private object storage accessible only through our authenticated backend. They are used to assess damage, process warranty claims or personalize your profile, and are not shared publicly.

6. Identification Information

ID photos captured for card payments are stored privately with the transaction, embedded in the final PAID receipt for that transaction, and used solely to verify the payer, respond to chargebacks or disputes and prevent fraud. They are visible only to authorized Supreme Auto Glass administrators.

7. Electronic Signatures

Your signature image is stored with the job record and reproduced on the receipt as evidence that the described service was completed and, for card payments, that the charge was authorized.

8. Payment Information

Card payments are processed by Square. Card data is entered in Square's secure form or Square's native card screen and is transmitted directly to Square; Supreme Auto Glass receives only a one-time payment token and the confirmation details listed above. Cash and Zelle payments are recorded as amounts and dates only.

9. Insurance Information

When you request insurance billing we use your insurer and claim information to prepare documentation and to track insurer payments, and we share the vehicle, service and invoice details needed for the claim with your insurer.

10. Communications

We send transactional messages (quote received, price ready, appointment changes, reminders, receipts, warranty decisions, security notices) by in-app notification, push notification and email. Verifying your email address is optional; if you choose to verify it, we send a one-time verification email containing a secure link. Emails are delivered through Resend. We do not currently send SMS messages. We do not sell your contact information or send third-party marketing.

11. Push Notifications

If you allow notifications, your device issues a token that we associate with your account to deliver notifications via Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS). You can revoke permission at any time in your device settings; tokens are removed when they expire or when you sign out.

12. Analytics

We compute business analytics (quote volume, conversion, revenue, peak demand, vehicle mix, promotion performance) from our own records. These analytics are aggregated for internal use and are not shared with advertising networks.

13. Service Providers

We share information only with providers that help us operate: Square (payments), Apple (Sign in with Apple, push notifications), Google Firebase (push notifications), Resend (email), NHTSA (VIN decoding), an AI service for reading VIN labels, and our hosting, database and object-storage providers. Each provider receives only the information needed for its function and is bound by its own privacy terms. We may also share information with your insurer at your request, with professional advisers, and where required by law.

14. Square

Square processes card payments as an independent payment processor and may act as a controller of the payment data it collects. Square's privacy policy is available at squareup.com/legal/privacy.

15. Firebase and Related Google Services

We use Firebase Cloud Messaging solely to deliver push notifications to Android devices. We do not use Firebase Analytics, Crashlytics or advertising identifiers.

16. Biometric Sign-In (Face ID, Touch ID and Android Biometrics)

You may optionally enable biometric sign-in in Account → Settings & Security. Biometric matching is performed entirely by your device's operating system (Apple Face ID or Touch ID, or Android biometrics). Supreme Auto Glass never receives, stores or has access to your biometric templates, facial geometry or fingerprint data. When you enable the feature, a device-bound sign-in credential is created and stored securely on your device; we keep only a one-way hash of that credential on our servers so we can recognise your device. It is deleted when you disable the feature, sign out of that device or delete your account.

17. Security and Fraud Prevention

We use information such as ID photos, signatures, IP addresses, device platform, consent records and payment events to verify customers, detect and prevent fraud and abuse, and respond to payment disputes. Administrative access is role-based and logged.

18. Legal and Compliance Uses

We may use and retain information to comply with tax, accounting and consumer-protection laws, to respond to lawful requests from authorities, to enforce our Terms, and to establish, exercise or defend legal claims.

19. Data Retention

We keep information only as long as necessary for the purposes described in this Policy or as required by applicable law:

• Transaction, payment, invoice, receipt, accounting and completed-service records: retained for 7 years.
• Customer signatures and service-authorization records associated with completed services: retained for 7 years.
• Customer ID photos: retained only as long as reasonably necessary for service verification, fraud prevention, dispute resolution or legal requirements, and deleted or securely de-identified when no longer necessary.
• Unaccepted quotes and related non-essential personal data: deleted or de-identified after 24 months.
• Warranty records: for the life of the applicable warranty.
• Consent records (your agreement to the Terms and acknowledgement of this Policy, with version, timestamp and technical metadata): for as long as needed to evidence consent.
• Account and other personal data: only as long as necessary for the purposes described in this Policy or as required by applicable law.

When information is no longer needed we delete or de-identify it.

20. Data Security

We protect information with encrypted connections (HTTPS), hashed passwords, token-based authentication, role-based admin access, private object storage served only through our authenticated backend, and payment tokenization through Square. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; we will notify you as required by law if a breach affects your information.

21. Your Privacy Rights

Depending on where you live you may have rights to access, correct, delete or obtain a copy of your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You can update most profile information and notification preferences in the App. To exercise other rights, contact us using the details below; we may need to verify your identity. We do not sell personal information and do not discriminate against you for exercising your rights.

22. Account Deletion

You can delete your account from Account → Settings → Delete account after re-entering your password, or by contacting us. Deletion takes effect immediately on confirmation: we disable sign-in and de-identify your profile (name, email, phone, photo), delete your notification tokens and active sessions, and delete or de-identify your open and unaccepted quotes. Records we are required or permitted to keep — invoices, receipts, transaction and accounting records, completed-service records, signatures and service authorizations, ID photos while still necessary, warranty records, consent records and security logs — are retained for the periods in Section 19 and then deleted or de-identified. Deletion is therefore immediate for your account but not complete for records tied to completed, paid work.

23. Children's Privacy

The App is intended for adults aged 18 or older. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

24. Changes to This Privacy Policy

We may update this Policy. Each update is published as a new numbered version with its own effective date; previous versions are preserved and your historical acknowledgement records continue to reference the version in effect at the time. We will notify you of material changes through the App or by email.

25. How to Contact Supreme Auto Glass

Supreme Auto Glass Inc. Phone: (305) 876-5656 Email: service@supremeautoglass.biz For any other contact method, please use the official contact information available in the Supreme Auto Glass app or on our website. No mailing address is published in this document.