Privacy Policy

Last updated: 31 August 2026

This Privacy Policy explains what data PitLabs ("we") collects, how we use it, and the rights you have. We aim for clear and plain language.

PitLabs operates a Windows desktop app and a web account portal that acts as an AI race engineer and telemetry tool for sim racing.

1. What We Collect

We collect only what we need to run the service.

1.1 Account Information

  • Username and email address.

  • Avatar image (optional).

  • If you sign in with Google or Discord, we receive your email and basic profile details from them.

  • Authentication data (login sessions and two-factor authentication if enabled).

1.2 Sim & Telemetry Data

  • Local Processing: Telemetry data (racing line, speed, throttle/brake/steering inputs, gear/RPM, lap times, sectors, car/track conditions, and setup status) is recorded locally on your PC.

  • Upload Trigger: Telemetry is only uploaded to our servers when you:

    1. Submit to the public leaderboard (controlled by your auto-upload setting), and/or

    2. Share laps within a private team garage, visible strictly to your teammates.

1.3 AI Engineer Data

  • When requesting setup assistance, we send your current setup, relevant telemetry/session context, and your prompt to our AI provider to generate advice.

  • Aggregated ratings and feedback on AI responses are used to refine suggestions.

1.4 Billing Data

  • Payments are processed via Stripe. We never store or receive credit/debit card numbers. We store only your Stripe customer/subscription identifiers and active plan status.

1.5 Technical & Usage Data

  • App version, AI request counts, local diagnostic/crash logs (kept on your PC), and standard server logs.

2. How We Use Your Data

We use your data strictly to:

  1. Run app functionality (telemetry, live overlays, AI race engineer, leaderboards, and team features).

  2. Operate community and social features you opt into.

  3. Improve AI engineer advice through aggregated feedback.

  4. Process Pro subscriptions and prevent abuse.

  5. Provide support and send essential account emails (e.g., password resets, security notices).

We do not sell your personal data or use it for third-party advertising.

3. Sub-Processors & Data Sharing

We share data only with service providers required to operate PitLabs:

  • Supabase: Database, authentication, and file storage.

  • Stripe: Payment processing and subscription management.

  • Anthropic (Claude): AI engineer response generation.

  • Resend: Transactional email delivery.

  • Vercel: Web application hosting.

  • Google / Discord: OAuth single sign-on (and Discord integration if you join our community).

Other drivers can see your public leaderboard entries (username, avatar, lap times, and conditions) and, within a team, your shared team laps and telemetry traces.

4. Your Choices & Rights

  • Keep Laps Private: Turn off auto-upload in Settings to keep your lap times off public leaderboards.

  • Leave a Team: You can leave a team at any time to halt future lap sharing with that garage.

  • Delete Everything: Navigate to Account → Security → Danger Zone to permanently erase your profile, lap times, team data, shared telemetry, and notifications while cancelling active subscriptions.

  • Access, Correction & Export: Contact us at privacy@pitlabs.app to request data access, correction, or portable exports (under GDPR, UK GDPR, CCPA, and applicable laws).

5. Data Retention

  • Active Accounts: Data is kept while your account remains active. Account deletion permanently purges account-tied data.

  • Team Telemetry: Shared team laps are automatically pruned after 120 days.

  • Local Data: Recordings and diagnostic logs stay on your local PC until cleared or uninstalled.

6. Security & Infrastructure

  • Encryption in transit across all endpoints.

  • Database access protected by strict Row-Level Security (RLS) policies.

  • Desktop login sessions stored encrypted on your local device.

7. International Transfers

Data may be processed by our infrastructure providers in the United States, EU, or other operating regions using GDPR-compliant safeguards such as Standard Contractual Clauses (SCCs).

8. Children's Privacy

PitLabs is intended for users 16 years of age and older. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact support@pitlabs.app for deletion.

9. Policy Updates

We will notify you of material changes to this policy through in-app notices or direct email prior to implementation.

10. Contact Us

PitLabs

Email: support@pitlabs.app