Privacy Policy

MyServiceStation ("we", "us", "our", or "MySS") is committed to being transparent about how we collect, use, store, and protect your personal information. This Privacy Policy governs the data practices for the MySS platform, including our website (myssapp.com), web dashboard, and mobile application. By using our Platform, you consent to the data practices described in this Policy. If you disagree with any part of this Policy, please discontinue use of the Platform immediately.

We collect the following categories of information: Account Information: • Full name and display name • Email address • Phone number • Profile photo (if provided) • Role (customer or service station owner) Vehicle Information: • Vehicle brand, model, year, and colour • Vehicle photos • Mileage and service history • Past service records you add manually Service Data: • Appointment bookings and status • Service job records and history • Reviews and ratings submitted • Service reminders set Location Data: • GPS location (when you use the Station Map feature, with your permission) • Service station geographical coordinates Technical Data: • Firebase Cloud Messaging token (for push notifications) • Device type and operating system version • App usage patterns and crash logs • IP address and network information

We use the collected information for the following purposes: • To create and manage your account • To facilitate service bookings between customers and service stations • To send push notifications about appointment status and service updates • To display service history and vehicle records • To automatically update your digital service record when a partner station completes a job • To improve the Platform's features, performance, and user experience • To respond to your inquiries and provide customer support • To enforce our Terms and Conditions • To comply with legal obligations • To analyze usage trends and generate aggregated analytics • To send service reminders and maintenance alerts The developer reserves the right to use anonymized and aggregated data for research, marketing, or business development purposes without restriction.

Your data is stored and processed using the following third-party services: Google Firebase: • Firebase Authentication — account management • Cloud Firestore — database storage • Firebase Storage — photo and file storage • Firebase Cloud Messaging — push notifications These services may store your data on servers located outside of Sri Lanka. By using this Platform, you consent to international data transfers. OpenStreetMap / Map Services: • Used to display station locations. Map tiles are fetched from OpenStreetMap servers. Google Sign-In: • If you sign in with Google, Google's privacy policy also applies. The developer is not responsible for the data practices of these third-party services.

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We may share your information in the following circumstances: • Between Customers and Service Stations: When you book an appointment, your name, vehicle information, and contact details may be shared with the relevant service station. • Legal Requirements: We may disclose your information if required by law, court order, or government authority. • Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. • With Your Consent: We may share information with third parties when you explicitly authorize us to do so.

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, loss, or misuse. Our security practices include: • Encrypted data transmission using industry-standard protocols • Secure authentication and session management • Access controls ensuring users can only access their own data • Regular security reviews of our platform and infrastructure While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and are not responsible for security breaches that are beyond our reasonable control. If you believe your account has been compromised, please contact us immediately at support@myssapp.com.

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us at support@myssapp.com. However, we may retain certain information for legitimate business purposes including: • Compliance with legal obligations • Resolving disputes • Enforcing our agreements • Maintaining audit trails and records Anonymized data may be retained indefinitely for analytics purposes.

Subject to applicable law, you have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Update or correct your personal information through your profile settings. • Deletion: Request deletion of your account and personal data. • Objection: Object to certain processing activities. • Data Portability: Request your data in a machine-readable format. The developer reserves the right to verify your identity before processing such requests and may decline requests that are unreasonable, repetitive, or technically infeasible.

The Platform requests access to your device's location solely for displaying nearby service stations on the Station Map. Location data is: • Only accessed when you actively use the map feature • Not stored on our servers • Not shared with third parties beyond map tile providers You may revoke location permission at any time through your device's settings.

We use Firebase Cloud Messaging to send push notifications about appointment updates, service status changes, and reminders. Your device's FCM token is stored in our database to enable this. You may disable push notifications at any time through your device's settings.

The Platform is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

The developer reserves the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting within the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: Platform: MyServiceStation (MySS) Email: support@myssapp.com We aim to respond to all inquiries within 14 business days.