Parts4Drive Privacy Policy

1. Purpose of Parts4Drive

Parts4Drive is an automotive commerce platform, multi-tenant enterprise operating system, and point-of-sale (POS) network engineered specifically for auto parts merchants, workshops, and commercial fleets across Nigeria, Ghana, and cross-border trade corridors.

The platform allows merchants to maintain verified inventory catalogs with MMYTE (Make, Model, Year, Trim, Engine) compatibility matrices, issue wholesale workshop invoices, and manage distributed store teams.

2. What Information We Access & Collect

When you choose to sign in to Parts4Drive via Google OAuth 2.0, we request only the absolute minimum basic profile scopes:

• openid: To authenticate your digital identity cryptographically.
• https://www.googleapis.com/auth/userinfo.email: To associate your store administrator privileges and send operational account alerts.
• https://www.googleapis.com/auth/userinfo.profile: To display your registered name and avatar inside your merchant store header.

We DO NOT access restricted or sensitive Google APIs. Parts4Drive never requests access to your Gmail messages, Google Drive documents, Contacts, Google Calendar, or Photos.

3. How We Use and Protect Google User Data

• Store Identification: Your email is used exclusively as your unique merchant identifier.
• No External Sharing: We do not share Google user profile data with external marketing partners or third-party tracking pixels.
• No Human Viewing: Our engineers never inspect your Google user data unless you provide explicit consent to resolve an urgent technical incident.

4. Data Storage, Cloudflare Infrastructure & Encryption Standards

All Parts4Drive databases, API services, and file storage run on Cloudflare Edge infrastructure (Cloudflare Workers, D1 distributed SQLite, and R2 object storage).

• Encryption in Transit: All web requests require TLS 1.3 encryption with HTTP Strict Transport Security (HSTS).
• Encryption at Rest: All database volumes, session tokens, and merchant catalogs are encrypted with AES-256 at rest.
• Multi-Tenant Isolation: Merchant data is segmented by isolated Organization IDs (e.g. sel_...), preventing cross-tenant access.

5. Data Retention and Account / Data Deletion Instructions

We respect your right to have your data erased at any time:

• Retention Policy: We retain account data only as long as you maintain an active merchant workspace.
• How to Delete Your Data: You can submit a deletion request by sending an email from your registered address to privacy@parts4drive.com or ngisense.inc@gmail.com with the subject line "Delete My Parts4Drive Account".
• Revoking Access in Google Account: You can immediately disconnect Parts4Drive from your Google account at https://myaccount.google.com/permissions.
• Fulfillment Timeframe: Deletion requests are processed within 30 calendar days, completely removing all personal identifiers, email addresses, and OAuth tokens from our primary databases.

6. Contact Information

For inquiries regarding this Privacy Policy, your rights under the Nigeria Data Protection Act (NDPA), Ghana Data Protection Act (Act 843), or Google API compliance: