Privacy Policy

Who we are and what Carvikon does

Carvikon is collision repair shop management software operated by Nebulink Business Solutions LLC dba Carvikon LLC. It gives repair shops a workflow board for managing vehicles and repair stages, customer communications, and appointment scheduling.

Information we collect

Depending on how you use Carvikon, we collect account and contact information, business and shop information, subscription and billing status, customer and vehicle records submitted by a shop, communications, appointment information, device and usage data, security logs, and support correspondence. Stripe processes payment-card details; Carvikon does not store full payment-card numbers.

Cookies and advertising technology

Required cookies keep Carvikon secure and working, including keeping you signed in, and stay on regardless of the choices below.

We use Google Analytics to understand how visitors use our site, and Meta Pixel and the X website tag to measure the performance of our own advertising and to show more relevant ads. These are on by default. You can turn them off at any time from the notice we show on your first visit, or permanently on the Privacy Choices page — the choice is remembered for that browser and takes effect immediately.

If your browser sends a Global Privacy Control signal, we treat that as an opt-out automatically. It overrides the default and any earlier choice you made here, and we honor it on every visit without asking you to repeat yourself.

Some of what these tags measure — a free trial converting to a paid subscription, for example — happens after you have left the site, when no pixel can fire. For those events we send the same information directly from our servers to Meta's Conversions API instead, subject to the exact same choice as the pixel: if you have opted out, or your browser signals Global Privacy Control, we do not send them. Any personal identifier in a server-side event, such as your email address, is one-way hashed (SHA-256) before it leaves our servers. We do not send Meta or X your name, phone number, vehicle information, or anything from inside your Carvikon account.

You can change your advertising choice at any time on the Privacy Choices page.

Google user data

Connecting Google is optional and happens only after you choose a Google integration and grant permission on Google's consent screen. Carvikon requests only the access needed for the feature you connect:

• Gmail: your Google account email address and permission to send email from the connected mailbox. Carvikon uses this permission to send customer messages that you initiate or configure. Carvikon does not read your inbox, contacts, or existing email messages.
• Google Calendar: your Google account email address and calendar-event access. Carvikon uses this access only to create, update, and delete repair appointment events in the connected account's primary calendar so they remain synchronized with Carvikon.

We store the connected Google account identifier, granted scopes, and encrypted or access-controlled OAuth access and refresh tokens on our servers so the requested integration can continue to work when you are not actively using Carvikon. Tokens are never exposed to other Carvikon customers.

Signing in with Google is different from the integrations above: it shares only your name, email address, and profile picture to create and authenticate your Carvikon account, is handled by our authentication provider, and grants Carvikon no ongoing access to your Google account.

How we use information

We use information to provide and operate Carvikon, authenticate users, process subscriptions, deliver requested communications and calendar synchronization, secure and troubleshoot the service, provide support, comply with law, and improve Carvikon.

Marketing emails to you

If you agree when you create your account, or later in Settings, we may send occasional Carvikon product news, tips, and offers to the email address on your account. This is optional and separate from the notices below: you can turn it on or off at any time from Settings → Account. Turning it off never affects account, billing, or security notices, which we send whenever they are needed to run your account.

Text messages and your shop's customers

If your shop uses Carvikon to text its customers, we operate the messaging infrastructure that sends those messages on your shop's instructions. Whether and how a customer has agreed to receive texts, and how they can stop receiving them (usually by replying STOP), is set out in that shop's own text-message program, published in its own privacy policy and terms of service. Carvikon hosts those documents at a carvikon.com URL for shops that do not have their own website, but the shop publishes them and answers questions about them, not Carvikon. We do not use a shop's customer phone numbers or message content for our own marketing, and we do not sell them.

How we share information

We do not sell Google user data or other personal information. We disclose information only to service providers that help us operate Carvikon, to an integration provider when you direct us to use that integration, to professional advisers, or when required by law or necessary to protect users and the service. Service providers may process data only to perform services for Carvikon and must protect it appropriately.

Unless you have opted out of advertising measurement, we also share hashed identifiers with Meta and X for that purpose only, as described in Cookies and advertising technology above.

Google user data is not used for advertising, retargeting, user profiling, credit or lending decisions, or sale to data brokers. We do not allow humans to read Google user data except when you give explicit permission for support, when required for security or legal compliance, or when the data has been aggregated and anonymized. Carvikon's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Carvikon does not use Google Workspace API data to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

Google Workspace API data is not transferred to artificial-intelligence services. Our use of information received from Google Workspace APIs adheres to the Google Workspace API User Data and Developer Policy, including its Limited Use requirements.

Security, retention, and deletion

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls and restricted server-side storage for OAuth credentials. No transmission or storage method is completely secure.

We retain information only as long as reasonably necessary to provide the service, maintain security, resolve disputes, and meet legal and accounting obligations. Google OAuth credentials are retained while the integration is connected. Disconnecting Gmail or Google Calendar in Carvikon deletes the stored connection credentials. You can also revoke access in your Google Account connections.

You may request deletion of your account or personal information by emailing us. We will delete or de-identify information unless we must retain it for legal, security, fraud prevention, billing, or dispute-resolution purposes.

Children's privacy

Carvikon is a business tool for repair shops and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, contact us and we will delete it.

Your choices and rights

Depending on where you live, you may request access to, correction of, deletion of, or a portable copy of personal information and may object to or restrict certain processing. For customer or vehicle data entered by a repair shop, contact that shop first because it controls how that data is used.

Advertising measurement is on by default and you can turn it off for a browser at any time on the Privacy Choices page. Your browser's Global Privacy Control signal, if enabled, turns it off automatically in that browser and overrides both the default and any earlier choice — you do not need to use the notice or that page as well.

Contact and policy changes

Questions, privacy requests, and deletion requests can be sent to hi@carvikon.com, through the contact form, which reaches the same people, or by mail to 2125 Biscayne Blvd, Ste 204 #22885, Miami, FL 33137. We may update this policy as Carvikon, our practices, or legal requirements change. We will post the revised policy here and update its effective date.