Privacy policy

Who is responsible

The shop is responsible for the records it keeps about its customers (names, phone numbers, cars, visits, invoices, photos); Junto processes them on the shop’s behalf. Junto’s operator, Servio LLC (ID 405892057), is responsible for your Junto account (a staff account, or your account in the car owner app).

For a shop’s records about you, ask the shop; for anything else, write to support@junto.ge.

The rules for using Junto are in the terms of service.

What we collect

• The car owner app: your mobile number (to sign in with an SMS code), the name you give, your language and SMS choices, and, if you allow notifications, your phone’s notification token.
• What the shops record about your visits: your cars, bookings, work orders with their photos and lines, invoices and payments, and the reviews you leave.
• Staff accounts: name, email, phone, password (stored only as a hash), the shops and roles you work in, and what you do in the program (a work order’s history shows who did what).
• The mechanic app (staff): your staff account, the photos of cars you take and the customer’s signature you capture at check-in (both saved to the shop’s work order), when you start and stop work on a job, and, if you allow notifications, your phone’s notification token.
• Camera and photos: both apps use the camera, or a photo you pick in the system’s photo picker, to read a car’s registration certificate on the phone itself. That image is not uploaded; only the values you confirm (plate, VIN, make, model) are saved. The mechanic app also uses the camera for the car’s photos at check-in and during the job.
• Technical data: the IP address a request comes from and the browser or app version, in the server logs, to keep the service secure.

Your Junto account on the web and in the app

• What we keep: your mobile number, name, language, SMS choices, notification tokens, your answers about car services' records ("This is me" or "Not me") and your sessions, each with the browser or app it is and its IP address.
• What stays with the car services: cars, visits, orders, invoices and payments are the services' records. The account only shows them to you; changing or deleting them is done with the service.
• Car services are linked to your account by your number. You confirm each record the first time: until you press "This is me" you see only the service's name, and "Not me" hides it from you for good (we don't tell the service). Company records are never shown by number: they belong to the corporate portal.
• A sign-in lasts 30 days from its last use, in a browser and in the app. Your profile shows where you're signed in, and you can end any session, or all the others at once.
• Delete the account at junto.ge/account (Profile → Delete account) or in the app. The account, its sessions, settings and answers are deleted; the car services' records stay. If you sign in with the same number again, you confirm each record again.

Why we use it

To sign you in; to show you your cars, visits and invoices at the shops that know your number; to let you book, approve work, pay and leave reviews; to send the texts the shops send through Junto; and to keep the service secure.

We do not sell personal data, show advertising or track you across other apps and websites. The app contains no analytics or advertising tools.

Who else sees it

• A shop sees what you do at that shop (a booking, an approval, a payment, a review). No shop ever sees your records at another shop.
• Providers that run parts of Junto for us: our servers at Hetzner (Germany), an SMS gateway in Georgia, an email provider, and Apple and Google (through Expo) to deliver notifications.
• Card payments: you enter your card on the bank’s own page (the shop’s bank). Card details never reach Junto; we only learn whether the payment went through.
• Car history by VIN: anyone may buy a car's service history at Junto shops by its VIN. It holds dates, shops, mileage, work and damage marks, and never names, phone numbers, earlier plates, photos or prices.
• Authorities, when Georgian law requires it.

How long we keep it

Your car owner account is kept until you delete it. A shop’s records are kept while the shop uses Junto and for as long as the law requires it to keep invoices and accounting records; a shop that leaves can export its data, which is deleted afterwards. Sign-in codes expire after 5 minutes, and server logs are kept for a short time.

Your rights

You can ask what data we hold about you, have it corrected or deleted, and turn reminder and offer texts off at any time on the app’s profile tab. Delete your app account in the app (Profile → Delete account) or as described on the support page. For a shop’s records about you, ask the shop.

Staff can delete their own account in the mechanic app (Settings → Delete account) or as described on the support page. The shops keep their work orders and hours under “deleted staff member”.

You can also complain to Georgia’s Personal Data Protection Service (pdps.ge).

Security

Connections are encrypted (HTTPS). Passwords are stored only as hashes, the app’s session in the phone’s secure storage, and photos are shown only to people allowed to see them. Daily backups are encrypted.

Children

Junto is not meant for children under 16.

Changes

When this policy changes, we update the date at the top.

Contact

Questions and requests: support@junto.ge.

Who runs Junto

Junto (junto.ge and its apps) is owned and operated by Servio LLC.

Company

Servio LLC

Identification number

405892057

Legal address

55 Zhiuli Shartava Street, Saburtalo District, Tbilisi, Georgia

Director

Giorgi Gordiashvili

Email

support@junto.ge