Legal

Privacy Policy

How LuciApps handles information in Gravy, and how your shop keeps ownership of its data.

Last updated September 10, 2026

This is a plain-language starting template provided for convenience. Have it reviewed by an attorney licensed in your state before you rely on it.

This Privacy Policy explains how LuciApps ("we") handles information in connection with Gravy. We built Gravy so that your shop's data stays yours.

1. Information we handle

  • Account information you provide, such as your name, shop name, email, and phone.
  • Shop data you and your staff enter: customers, vehicles, inspections, estimates, invoices, appointments, and messages ("Your Data").
  • Your customers' information that you add to run your shop (contact details, vehicle and service history). You are the controller of this information; we process it on your behalf.
  • Payment information is handled by our payment processor and your connected processor; we do not store full card numbers.
  • Usage and device data, such as log and analytics data, to operate and secure the service.

2. How we use information

We use information to provide, secure, and improve Gravy; to process your subscription; to send service-related messages; and to provide support. We do not sell Your Data or your customers' information, and we do not use it to advertise to your customers.

3. Messaging consent

Gravy sends texts and emails on your behalf only when you configure them. You are responsible for having the right to contact your customers. We provide STOP/unsubscribe handling and honor opt-outs.

4. When we share information

We share information only with service providers that help us run Gravy (for example, hosting, our payment processor, and the messaging and integration providers you connect), under obligations to protect it; and when required by law. We may share aggregated, de-identified data that cannot reasonably identify a person.

5. Your data ownership, export, and deletion

You can export Your Data at any time. If you close your account, you may export first; after a reasonable period we delete or de-identify Your Data, except where we must retain it to comply with law. You may ask us to help delete a specific customer record.

6. Security

We use reasonable technical and organizational measures to protect information, including encryption in transit and access controls. No system is perfectly secure, but we work to keep your data safe and to notify you of incidents where required.

7. Cookies

Our websites use essential cookies and lightweight analytics to operate and improve. You can control cookies through your browser.

8. Children

Gravy is a business tool and is not directed to children under 16, and we do not knowingly collect their information.

9. Changes

We may update this Policy. We will post the updated version with a new date and, for material changes, notify you where appropriate.

10. Contact

Questions or requests about your information? Contact us.