Trust

Your data

A shop’s records are the shop. Here is plainly how Concourz keeps them, who can see what, and how you take them with you.

It’s yours

Your clients, cars, jobs, photos and prices belong to your shop. We store and process them only to run Concourz for you. We don’t sell them, don’t use them for advertising, and don’t contact your clients for our own purposes.

Where it lives

On your devices. Every phone, tablet and computer you use keeps its own full copy of the shop in the browser, which is why it works offline.
On our servers. With a shop account, records and photos also sync to our database (Supabase, in the United States) so every device in the shop has them.
In transit, everything between your devices, your clients and our servers is encrypted (HTTPS).

Each shop is kept apart

Access is checked by the database itself on every read and write, not just by the app: a person signed in to one shop can’t read or change another shop’s records, photos, invoices or statements. Signed-out visitors can’t read shop records at all; they only reach the few pages described below. We tested these rules with separate accounts before launch.

Inside your shop, the owner invites staff by email and can remove them. Only the owner manages the plan and card payments.

What your clients see

Clients see only the pages you send them: the booking page, their own tracker, a quote, or (for dealer and fleet accounts) their account portal. These show what the client needs, such as their car, the work, the stage, photos of their car and the invoice. They don’t show your internal notes, what you pay your team, supplies, or anything about other clients. Tracker and quote links are long random codes that can’t be guessed.

Card payments

When a client pays by card, they pay on Stripe’s secure page. Card numbers go to Stripe and never pass through or get stored by Concourz. The money goes to your shop’s own Stripe account; payouts, refunds and disputes are handled in your Stripe dashboard.

Photos

Photos are stored privately for your shop. A client’s tracker shows photos of their own car through links that expire. If photo ID is on, the check-in photo is sent to our AI provider (Anthropic) to read the vehicle’s make, model, color and plate; Concourz doesn’t keep a copy there.

Getting it out

Settings · Download backup saves every record and setting as a file you can restore later.
Reports · Export jobs as CSV and Settings · Calendar and accounting give spreadsheets of jobs, invoices, customers, payments and daily sales, including files laid out for QuickBooks Online.
Want everything deleted from our servers? Email us from the shop owner’s address and we’ll confirm before deleting.

If you stop paying

Nothing is deleted. Your devices keep everything and keep working. Syncing between devices, client pages and online booking pause until you choose a plan again, and you can still download your backup and exports.

Who we use

Supabase: database, sign-in, photo storage and server functions.
Vercel: hosting for the app and this site.
Stripe: Concourz subscriptions and your clients’ card payments.
Resend: sending emails you turn on, in your shop’s name.
Anthropic: reading vehicle details from the check-in photo, when photo ID is on.
Open-Meteo: weather for mobile jobs. Only the city is sent, never the street address or the client.

Fonts and the app’s code are served from our own site; there are no advertising or tracking scripts.

Found a problem?

If you think you’ve found a security issue, email and we’ll respond quickly. Please don’t access other shops’ data to prove it.