Privacy Policy

Last updated: 29 August 2026

Privacy Policy

Effective Date: 29 August 2026

This Privacy Policy explains how SCALE PATH TECHNOLOGY SOLUTIONS - L.L.C - S.P.C, a limited liability company - sole proprietorship company registered in Abu Dhabi, United Arab Emirates, under Economic Licence No. CN-6267667 (ScalePath, GCC, we, us), collects, uses, discloses, and protects information in connection with Garage Cost Control.

Garage Cost Control, also referred to as GCC, is a garage management system available through garagecc.app and related pages, dashboards, applications, and services.

This Privacy Policy should be read together with our Terms of Use and Disclaimer.

Capitalized terms not defined here have the meaning given in the Terms of Use.

1. Roles: Who Is Responsible for What Data

It is important to understand the different roles involved.

Account and Billing Data

For account, workspace, subscription, billing, and payment-related information, we act as the data controller.

This means we decide why and how this information is processed for purposes such as account creation, billing, support, security, and legal compliance.

Tenant Content

For Tenant Content, the Tenant acts as the data controller, and we act as a data processor on the Tenant's instructions.

Tenant Content may include:

customer records;
vehicle records;
work orders;
invoices;
appointments;
expenses;
inventory records;
uploaded photographs;
documents;
notes;
any Tenant Customer information the Tenant chooses to enter into the Service.

The Tenant is responsible for having a lawful basis to collect, store, use, and process Tenant Customer information in the Service.

The Tenant is also responsible for honoring any rights its Tenant Customers may have under applicable law.

We are not a party to the relationship between a Tenant and its Tenant Customers. More detail is provided in our Disclaimer.

2. Information We Collect

We collect information needed to provide, operate, secure, and improve the Service.

Legal acceptance records. When you confirm that you accept our Terms of Use, this Privacy Policy, our Disclaimer, and the applicable billing terms, we record that acceptance — the date and time, the version of each document in force at that moment, the language it was presented in, the flow it was given from, and the account and Workspace it relates to. Where our infrastructure already receives them, the IP address and browser user agent of that request are recorded with it.

Account Information

We may collect:

name;
email address;
phone number;
password in hashed form;
user role;
Workspace details;
language preference;
login and account status.

We do not store passwords in plain text.

Workspace and Tenant Content

Tenants and Authorized Users may enter or upload information such as:

customer records;
vehicle records;
work orders;
invoices;
appointments;
inventory;
expenses;
staff records;
photographs;
documents;
notes;
service history;
payment status records;
other information entered into the Workspace.

Billing Information

We may collect and store:

selected Subscription plan;
billing status;
payment history;
invoice records;
Add-on purchases;
subscription changes;
failed payment records.

Card details are processed by our payment processor, currently Stripe, and are not stored directly by us.

Technical and Usage Data

We may automatically collect:

IP address;
browser type;
device information;
operating system;
log data;
session activity;
diagnostic information;
security events;
error information;
usage patterns within the Service.

This information helps us operate, secure, diagnose, and improve the Service.

Communications

We may collect communications you send to us, including:

support messages;
billing questions;
legal or privacy requests;
feedback;
emails;
messages sent through contact forms.

Where the Service provides WhatsApp links, templates, or communication tools, the Tenant remains responsible for the content and use of those communications.

3. How We Use Information

We use information to:

provide, operate, and maintain the Service;
create and manage accounts and Workspaces;
authenticate users;
enforce tenant isolation and role-based access;
process Subscriptions, Add-ons, invoices, and payments;
communicate about billing, support, account status, suspension, cancellation, and service updates;
send transactional communications, including verification emails, password resets, staff invitations, receipts, and system notices;
provide customer support;
diagnose technical issues;
monitor security and prevent abuse;
improve reliability, usability, and performance;
comply with legal obligations;
enforce our Terms of Use;
protect our rights, users, Tenants, and the Service.

We do not sell personal information.

We do not use Tenant Content to train third-party AI models.

We also record and use legal acceptance records to evidence your acceptance of our terms and to identify which version of those terms applies to you.

4. Tenant Isolation and Security

Each Workspace is intended to operate as an isolated tenant environment.

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

These measures may include:

encrypted connections;
hashed credentials;
access controls;
tenant separation controls;
role-based permissions;
infrastructure security measures;
logging and monitoring where appropriate.

Platform personnel may access Tenant Content only where reasonably necessary to:

provide support;
investigate technical issues;
prevent abuse;
improve service reliability;
comply with law;
enforce our terms.

Such access is limited to authorized personnel and may be logged.

No method of transmission, hosting, or storage is completely secure. We cannot guarantee absolute security.

5. How We Share Information

We do not sell personal information.

We share information only where necessary to provide, operate, secure, bill, support, or legally protect the Service.

Our service providers may include:

Payment processing: Stripe, to process subscription payments and billing.
Hosting and infrastructure: Hostinger, to host and operate the Service.
Email delivery: Hostinger or related email providers, to send transactional emails.
Storage and technical services: secure service providers used to store uploaded files, operate the application, monitor performance, or provide support.

We may also disclose information:

if required by law, court order, regulator, or legal process;
to protect our rights, users, Tenants, Tenant Customers, or others;
to investigate fraud, abuse, security incidents, or unlawful activity;
in connection with a merger, acquisition, restructuring, sale of assets, or transfer of the Service.

If the Service or company is transferred to another entity, we will require the successor to honor the commitments in this Privacy Policy or provide appropriate notice.

6. International Transfers

Information may be processed or stored in countries other than the country where the Tenant or Tenant Customer is located.

Where we transfer personal information across borders, we take steps intended to ensure that information receives an appropriate level of protection, consistent with applicable law.

By using the Service, the Tenant understands that information may be processed through hosting, infrastructure, payment, email, and support providers used to operate the Service.

7. Data Retention

We generally retain account information and Tenant Content while the Workspace remains active.

After cancellation or termination, we may retain Tenant Content for up to thirty (30) days to allow export, account recovery, or completion of administrative processes, unless a longer period is required by law or agreed in writing.

After that period, Tenant Content may be deleted from active systems.

Backup copies may remain for a limited period, typically up to ninety (90) days, before being overwritten or deleted in the ordinary course of backup rotation.

Billing, tax, audit, security, and legal records may be retained for longer where required by applicable law or legitimate business purposes.

If a Subscription is suspended or terminated for non-payment as described in our Terms of Use, Tenant Content may become inaccessible and may later be deleted in accordance with these retention practices.

Legal acceptance records are retained for as long as they may be needed to evidence the agreement they relate to, which may be longer than the Workspace itself.

8. Your Rights

Depending on your location and applicable law, you may have rights to:

access your personal information;
correct inaccurate personal information;
request deletion of personal information;
request export of personal information;
object to certain processing;
restrict certain processing;
withdraw consent where processing is based on consent.

For account-level requests, contact us using the details in Section 12.

For Tenant Customer information contained in Tenant Content, requests should generally be directed to the relevant Tenant first, because the Tenant is the controller of that information.

Where required by applicable law, we will support the Tenant in responding to valid requests relating to Tenant Content.

9. Tenant Customer Information

Tenants may use the Service to store information about their own customers.

This may include:

names;
phone numbers;
email addresses;
vehicle details;
vehicle service history;
invoices;
payments;
notes;
photographs;
appointment information;
quote and approval records.

The Tenant is responsible for informing its Tenant Customers about how their information is collected and used.

The Tenant is also responsible for obtaining any required consent or lawful basis for entering Tenant Customer information into the Service.

We do not have a direct contractual relationship with Tenant Customers.

10. Cookies and Similar Technologies

We may use cookies or similar technologies that are necessary to operate the Service.

These may be used to:

keep users signed in;
remember session status;
remember language preference;
improve security;
support essential platform functionality.

We do not currently use third-party advertising cookies or cross-site tracking cookies.

If we introduce non-essential cookies in the future, we will provide notice and choice where required by applicable law.

11. Children's Privacy

The Service is intended for business use by adults.

The Service is not directed at children.

We do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, contact us so we can take appropriate action.

12. Changes to This Privacy Policy and Contact

We may update this Privacy Policy from time to time.

When we update it, we will update the effective date above.

For material changes, we may provide reasonable notice, such as by email or through an in-app notice.

Questions or requests about this Privacy Policy can be directed to:

Support: support@scalepath.me
Privacy: info@scalepath.me

You may also contact us through garagecc.app or scalepath.me.

Garage Cost Control

Garage Management System

Product

Company

Legal