Privacy Policy
Version 2026-08-20 · MontagemDrive
What is collected
- Account: email address, display name, password (stored only as a PBKDF2 hash, never in a readable form), and — if you enable two-factor — an encrypted authenticator secret and hashed recovery codes.
- Your records: vehicles, costs, odometer readings, reminders, partners and the documents you upload.
- Security events: failed sign-in counts and lockouts, and an audit trail of changes to records.
Vehicle identifiers are personal data when they identify a person. A VIN or a plate belonging to a private individual's car identifies that individual, so they are treated as personal data here rather than as neutral technical strings.
Cookies
Essential only — two of them: one to keep you signed in, one to remember your language and theme. There is no analytics, no advertising and no third-party tracking, which is why there is no cookie banner. If that ever changes, this policy changes first.
Why, and on what legal basis
- Contract — your account and your records: without them there is no service.
- Legitimate interest — security logs, lockouts, the audit trail and backups: keeping the service and your data safe.
- Consent — marketing email. None is sent, and none will be until there is a checkbox asking for it.
Who else sees it
Nobody, today. There is no analytics provider, no advertising network, and no data sale — ever. When hosting, email delivery and payments are chosen for production, each one will be named here as a sub-processor before it is used.
How long it is kept
- Your records: for as long as your account exists. History is the product — a vehicle you sold in 2019 stays in the record until you remove it.
- Deleted accounts: access ends immediately; the account is irreversibly purged after 30 days.
- Audit trail: kept after an account is erased, but pseudonymised — it records that an action happened, identified only by an internal id, with the name and email removed. An audit trail its own subject can erase would not be one.
- Backups: daily, retained 14 days, then overwritten.
Your rights
- Access and portability: download everything as JSON, any time, on any plan.
- Erasure: delete your account. If you own a company record with other members, transfer ownership or delete the company first, so their data is not stranded.
- Rectification: edit anything in the app; email the operator for anything you cannot reach.
- Objection and complaint: contact the operator, and you may complain to the Croatian supervisory authority (AZOP).
Where it is stored
Currently on the operator's own infrastructure. Production hosting will be EU-region, and this section will name it once chosen.