AAMUP Privacy Policy

Overview

This policy explains how AAMUP handles personal information when you use aamup.org, submit a repair request, create or use an account, communicate with AAMUP, or receive and pay an invoice.

Information you provide

• Account and contact information: name, email address, phone number, profile information, and account preferences.
• Repair-request information: device type, brand, model, requested service, problem description, consent, and related communications.
• Device and service information: information needed to evaluate, document, and administer a requested repair.
• Invoice and transaction records: invoice identifiers, amounts, currency, status, and payment-related records. Payment card and bank details are entered on Stripe-hosted pages and are not collected by AAMUP's website.
• Authentication information: email-verification state, account identifiers, session information, recovery activity, and security-related account data. Password authentication is handled by Supabase.
• Social login information: if an available Google, Facebook, or Apple sign-in option is selected, AAMUP and Supabase receive basic identity information made available by that provider, such as a provider identifier, name, and email address.

Technical information collected automatically

When the site and its infrastructure are used, AAMUP and its service providers may process browser and device information, request timestamps, IP addresses, network and infrastructure logs, page or route information, error details, deployment identifiers, and security events. Sentry error monitoring is configured to limit sensitive content, but technical error reports may include sanitized browser, device, and diagnostic metadata.

Supabase uses browser storage and authentication tokens to maintain sign-in sessions. The site may also use local storage, cookies, or similar technologies that are necessary for authentication, security, and service operation. AAMUP does not currently describe these technologies as advertising trackers.

How information is used

AAMUP uses information to administer repair requests and services; prepare documentation and invoices; communicate with customers; create, authenticate, recover, and secure accounts; provide customer dashboards; verify invoice ownership and payment status; prevent fraud and abuse; diagnose errors; protect the website and its users; meet recordkeeping and other legal obligations; and respond to privacy or support requests.

Service providers and disclosures

AAMUP uses providers that process information to operate the service:

• Netlify hosts the website and server functions and processes infrastructure and request logs.
• Supabase provides authentication, session management, database storage, and account-related services.
• Stripe provides customer, invoice, hosted payment, portal, fraud-prevention, and payment-status services.
• Resend processes repair and billing communications and attachments.
• Sentry provides browser and server error monitoring when monitoring is enabled.
• Google, Facebook, or Apple process authentication information if the corresponding social login option is enabled and selected.

AAMUP may also disclose information to professional advisers or authorities when reasonably necessary to comply with legal obligations, protect rights and safety, investigate fraud or security incidents, or establish and defend legal claims. AAMUP does not sell payment credentials; those credentials are handled by Stripe.

Data retention

AAMUP retains information for as long as reasonably needed to provide and secure the service, maintain repair and transaction records, resolve disputes, enforce agreements, respond to requests, and satisfy applicable recordkeeping obligations. Retention periods vary by the type of record and the systems used. Information may remain for a limited period in provider logs, backups, fraud-prevention systems, or records that must be retained for legitimate business or legal reasons.

Account deletion, correction, and privacy requests

Signed-in customers can submit an account-deletion request through the customer dashboard. A request may require recent authentication and identity verification. Deletion may not include records AAMUP must retain for security, transaction integrity, dispute handling, or legal obligations.

To ask AAMUP to correct account or contact information, or to submit another privacy question or request, email david@aamup.org or call 503-482-8283. AAMUP may need to verify your identity and the scope of the request before acting.

Security

AAMUP uses administrative and technical safeguards intended to protect information, including authenticated access and server-side ownership checks for customer and invoice records. No website, transmission, or storage system can be guaranteed completely secure.

Children's privacy

AAMUP's repair and account services are not directed to children under 13, and AAMUP does not knowingly collect personal information from children under 13 through the site. If you believe a child has provided information, contact AAMUP so the matter can be reviewed.

Policy updates

AAMUP may update this policy as its services, providers, or practices change. The effective date at the top of this page identifies the current version. Material updates may also be communicated through the website or an appropriate customer communication.

Contact AAMUP

For privacy questions or requests, contact AAMUP at david@aamup.org or 503-482-8283.