Last updated: March 1, 2026
Shop Commander ("we," "us," "our") is committed to protecting the privacy of the auto shops and individuals who use our platform. This Privacy Policy explains what data we collect, why we collect it, and how we handle it. We operate in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
When you sign up for Shop Commander, we collect your name, phone number, email address, and shop name. We use this to create your account, communicate with you about the Service, and provide support.
As you use Shop Commander, you store information about your customers, vehicles, repair orders, inspections, invoices, estimates, inventory, and other shop operations. This data is entered by you and your team and is used solely to provide the Service to your shop.
We collect basic usage analytics (pages visited, features used, session duration) to understand how the platform is used and to improve it. We use Google Analytics for website analytics on shopcommander.com.
If you use SMS features, message content and phone numbers are processed through our messaging infrastructure. SMS messages sent and received through Shop Commander are logged for delivery confirmation and troubleshooting.
The following third-party services process data as part of Shop Commander's functionality:
We carefully select third-party providers and only share the minimum data necessary for each service to function.
Your data is stored on Canadian servers with geographically distributed backups for redundancy and disaster recovery. We implement industry-standard security measures including:
We do not sell your data. We do not share your data for advertising purposes. We do not allow third parties to use your data for marketing, profiling, or any purpose beyond providing the Shop Commander service. Your customer lists, repair histories, and shop data are yours — not ours to monetize.
You can export your data at any time. If you want to leave Shop Commander, your data leaves with you — no export fees, no lock-in, no hostage situations.
You can also request deletion of your data. Upon receiving a deletion request, we will remove your data from our active systems within 30 days. Backup copies may persist in encrypted backups for up to 90 days before being purged through normal backup rotation.
In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of confirming the breach. Notification will include the nature of the breach, what data was affected, what steps we're taking, and what steps you can take to protect yourself.
Shop Commander complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to:
We collect and use personal information only for purposes that a reasonable person would consider appropriate in the circumstances. We obtain meaningful consent for the collection, use, and disclosure of personal information.
The Shop Commander marketing website uses cookies for analytics (Google Analytics) and basic site functionality. The Shop Commander application uses session cookies for authentication. We do not use advertising cookies or tracking pixels.
We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
For privacy-related questions, data export requests, or data deletion requests, contact us at: