Last updated: August 15, 2026
This policy has not been reviewed by a lawyer. It is an accurate description of how NextCarHub actually handles data as of the date above, written in plain language.
NextCarHub ("the Service") is operated from Serbia by the developer of nextcarhub.com ("we", "us"). This policy covers both the public website at nextcarhub.com and the application at app.nextcarhub.com.
1. What information we collect
Account information. When you create an account we collect your email address and display name. If you sign in with Google, we receive your email address, name and profile photo from Google — we never see your Google password.
Shop data you enter. This is the bulk of it: your shop name, your team members, your customers' names and phone numbers, their vehicles (make, model, year, plate), appointments, service history, notes, prices you record against jobs, and any files or photos you attach.
Billing information. Payments are processed by PayPal. We receive a subscription ID and its status. We never see or store your card number.
Technical information. Standard server and security logs from our hosting provider, including IP addresses, needed to operate the Service and prevent abuse.
2. How we use it
- To provide the Service — your calendar, records and reports.
- To authenticate you and keep your shop's data separate from every other shop's.
- To take payment and manage your subscription.
- To respond when you contact us for support.
- To keep the Service secure and diagnose faults.
We do not sell your data. We do not use it to train machine learning models. We do not show advertising, and we do not share your data with advertisers.
3. Legal bases (for customers in the EU/UK)
- Contract — providing the Service you signed up for.
- Legitimate interests — security, fault diagnosis, preventing abuse.
- Legal obligation — retaining records where the law requires it.
4. Who we share it with
We use a small number of processors to run the Service. We do not share your data with anyone else.
| Provider | What for | Where |
|---|---|---|
| Google Firebase / Google Cloud | Database, authentication, file storage, hosting, serverless functions | United States |
| PayPal | Subscription payments | United States |
| Google Fonts | Website typeface on the public site | United States |
We may also disclose information if required by law, or in connection with a sale or transfer of the business — in which case you would be notified.
5. Cookies and tracking
The application uses cookies and local browser storage strictly to keep you signed in and remember your theme preference. The public website sets no advertising or cross-site tracking cookies. Loading the site's typeface causes a request to Google Fonts, which means Google receives your IP address as part of that request.
6. Google sign-in
If you sign in with Google, Google tells us your email address, name and profile picture so we can create your account. We do not receive your password, and we do not gain access to your Gmail, Drive or any other Google service.
7. International transfers
Our infrastructure providers are US-headquartered and your data is stored on their infrastructure, while this business operates from Serbia. If you are in the EU/UK, this means your data is transferred outside your region; our providers rely on standard contractual clauses for these transfers.
8. How long we keep it
We keep your shop's data for as long as your account exists. If you cancel, your data remains for 30 days so you can reactivate without losing anything, after which it is deleted. You can ask us to delete it sooner. Security logs are retained on a shorter rolling basis by our hosting provider.
9. How we protect it
Data is encrypted in transit (HTTPS) and at rest by our infrastructure provider. Access to each shop's data is enforced server-side by database security rules, not just in the browser — one shop cannot read another's records. Sensitive credentials such as payment API secrets are stored in a dedicated secrets manager, never in our source code.
10. Children
The Service is a business tool and is not directed at anyone under 16. We do not knowingly collect information from children.
11. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to complain to your local data protection authority. To exercise any of these, email hello@nextcarhub.com. We aim to respond within 30 days, and we do not charge for reasonable requests.
12. Controller and processor
For the data your shop enters about its own customers, your shop is the data controller and NextCarHub acts as a data processor: we process that information only to provide the Service to you. You are responsible for having a proper basis to store your customers' details in a third-party system. For your own account and billing information, we are the controller.
13. Changes to this policy
If we make a material change we will update the date at the top of this page and, where the change is significant, notify account holders by email.
14. Contact
Questions, requests, or complaints: hello@nextcarhub.com.