Privacy Policy

Your account information. When a shop signs up we collect the business name, a business phone number, the names and email addresses of the people on the account, a password (stored only as a one-way cryptographic hash that we cannot reverse), and billing status. We use the phone number to reach you about your account, for example to help a shop that signed up but got stuck getting started. This is information about YOU, and we are responsible for it.

Your shop’s business records. Invoices, customers, trucks and trailers, photos, payments, and everything else your shop enters. This data belongs to your shop. It includes personal information about YOUR customers (names, emails, phone numbers), which we process only on your instructions, only to run the service for you.

In plain English: we hold a little information about you, and we safeguard a lot of information for you. Yours stays yours.

• Running the service: storing your records, rendering your pages, generating your PDFs.
• Sending the emails you trigger (invoices, receipts, statements, reminders) to your customers, from your shop’s name.
• Billing your subscription through Stripe.
• Keeping the service reliable and secure: error tracking, backups, abuse prevention (for example, rate limits and blocking email addresses that bounce).
• Answering you when you contact us.
• If you checked the optional box at signup: sending you occasional text messages about Diesel Genie (offers, help getting started). Texts only ever go to people who opted in, reply STOP any time and they end, and we never sell or share your number.

We do NOT sell any information. We do NOT use your shop’s business records for advertising, profiling, or building products that compete with your shop. We do not use your data to train artificial intelligence models.

We use a small set of providers, each for one job, each bound by their own contractual and security obligations:

We add or replace a provider only with equivalent or better protections, and this page’s version changes when the list changes.

In plain English: a short list of providers, each doing one job; the payment companies are named, and card numbers never touch our servers at all.

• One shop, one database. Your records live in their own database, physically separate from every other shop’s. There is no shared table anywhere with two shops’ business data in it.
• Encryption. All traffic uses HTTPS. Nightly backups are encrypted before upload with a key we control, and backup files are additionally locked against deletion (by anyone, including us) for 30 days after they are written.
• Passwords are stored as one-way hashes. Sign-in, signup, and password reset are rate-limited against guessing.
• Access. No customer-facing “browse all shops” tooling exists; operator access is limited, logged, and used for support and billing administration only.
• Tested recovery. Backups are restored and verified on a schedule, so recovery is a practiced procedure, not a hope.

No system is perfectly secure, but if we ever discover a breach affecting your data, we will notify you promptly at your account email with what we know and what we are doing.

The app, app.dieselgenie.com, uses one essential cookie: your sign-in session. Our marketing website, dieselgenie.com, sets one first-party analytics cookie (PostHog) so we can count visitors and see where people give up on the demo or free-trial request form; its session recordings mask every form box and never capture what a visitor types, and PostHog does not load at all when a browser sends Do Not Track or Global Privacy Control. The website’s hosting provider also counts page views, with no cookie and no identifier that lasts beyond a day. No advertising cookies, and no analytics that follow you around the internet.

• While your account is active: your records stay as long as you keep them; the service is designed around never hard-deleting your business history.
• After cancellation: your data stays in your account and stays exportable; it is deleted only when you ask us in writing and we complete that deletion. A deletion request takes effect after a 30-day waiting period, during which you can cancel it and nothing is removed; we confirm with you before and after. Once we have confirmed your deletion request with you, the shop is closed to sign-in for the waiting period; call the request off and it comes back unchanged. Encrypted backups then age out on our backup retention schedule (roughly 90 days).
• Email addresses that bounce or complain are kept on a suppression list (stored as unreadable fingerprints, not readable addresses) so we stop mailing them; that is a legal obligation and a deliverability protection.

You can read, correct, export, or delete your shop’s information at any time from inside the app, and the full export is free, always, even if your subscription has lapsed. For anything you cannot do in the app, email sales@dieselgenie.com and we will handle it within 30 days.

If one of YOUR customers asks about their personal information in your shop’s records, that request belongs to your shop (it is your data); we will help you fulfill it. If a person contacts us directly, we will refer them to the shop they did business with and assist as the law requires.

Depending on where you live, you may have specific legal rights (such as access, correction, deletion, and portability). We honor requests for all of these regardless of which state’s law applies, at no charge.

The service is business software for repair shops and is not directed at children. We do not knowingly collect information from anyone under 16.

Our providers store data in the United States. If that ever changes, this page’s version changes first.

If we make a material change, we will notify you by email or in the app at least 30 days before it takes effect, and the version number and date at the top will change. The change history is available on request.

Surepath Transport INC (the maker of Diesel Genie)
North Carolina, United States
sales@dieselgenie.com