Privacy Policy
How LuciApps handles information in Gravy, and how your shop keeps ownership of its data.
Last updated September 10, 2026
This Privacy Policy explains how LuciApps ("we") handles information in connection with Gravy. We built Gravy so that your shop's data stays yours.
1. Information we handle
- Account information you provide, such as your name, shop name, email, and phone.
- Shop data you and your staff enter: customers, vehicles, inspections, estimates, invoices, appointments, and messages ("Your Data").
- Your customers' information that you add to run your shop (contact details, vehicle and service history). You are the controller of this information; we process it on your behalf.
- Payment information is handled by our payment processor and your connected processor; we do not store full card numbers.
- Usage and device data, such as log and analytics data, to operate and secure the service.
2. How we use information
We use information to provide, secure, and improve Gravy; to process your subscription; to send service-related messages; and to provide support. We do not sell Your Data or your customers' information, and we do not use it to advertise to your customers.
3. Messaging consent
Gravy sends texts and emails on your behalf only when you configure them. You are responsible for having the right to contact your customers. We provide STOP/unsubscribe handling and honor opt-outs.
4. When we share information
We share information only with service providers that help us run Gravy (for example, hosting, our payment processor, and the messaging and integration providers you connect), under obligations to protect it; and when required by law. We may share aggregated, de-identified data that cannot reasonably identify a person.
5. Your data ownership, export, and deletion
You can export Your Data at any time. If you close your account, you may export first; after a reasonable period we delete or de-identify Your Data, except where we must retain it to comply with law. You may ask us to help delete a specific customer record.
6. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit and access controls. No system is perfectly secure, but we work to keep your data safe and to notify you of incidents where required.
7. Cookies
Our websites use essential cookies and lightweight analytics to operate and improve. You can control cookies through your browser.
8. Children
Gravy is a business tool and is not directed to children under 16, and we do not knowingly collect their information.
9. Changes
We may update this Policy. We will post the updated version with a new date and, for material changes, notify you where appropriate.
10. Contact
Questions or requests about your information? Contact us.