View prior versions of this policy
SaaS Car, Inc. dba myodo Effective Date: May 25, 2026 Last Updated: May 25, 2026
This Privacy Policy describes how SaaS Car, Inc. dba myodo ("myodo," "we," "us," or "our") collects, uses, discloses, and retains personal information when you use our website (myodo.co), connected vehicle devices, and related services (collectively, the "Service").
| Category | Examples |
|---|---|
| Identifiers | Name, email address, phone number, mailing address |
| Account credentials | Email and password |
| Vehicle information | VIN, license plate number, year/make/model |
| Service records | Repair orders, receipts, invoices you upload |
| Communications | Messages you send through the platform |
| Payment information | Billing address, payment method (processed by third-party processor) |
| Category | Examples |
|---|---|
| Device telemetry | GPS location, vehicle speed, engine RPM, odometer readings, trip start/end times, trip distance, diagnostic trouble codes (DTCs), fuel consumption |
| Usage data | Pages viewed, features used, session duration, IP address, browser type, device type |
| Geolocation | Precise GPS coordinates from connected OBD-II device (continuous during vehicle operation); browser geolocation at time of document upload |
| Source | Data |
|---|---|
| NHTSA vPIC | Vehicle specifications decoded from VIN |
| Plate lookup services | VIN resolution from license plate |
| Repair shops on our platform | Service records, repair orders performed on your vehicle |
Under the California Privacy Rights Act (CPRA), we collect the following categories of Sensitive Personal Information:
You have the right to limit our use of your Sensitive Personal Information. See Section 8.
| Purpose | Categories Used |
|---|---|
| Provide the Service | All categories |
| Track vehicle mileage and trips | Device telemetry, geolocation |
| Detect maintenance needs | Device telemetry, service records |
| Parse and digitize uploaded documents | Service records, vehicle info |
| Connect you with repair shops | Identifiers, vehicle info, service records |
| Send notifications (service alerts, messages) | Identifiers, device telemetry |
| Improve document parsing accuracy | Service records (de-identified) |
| Detect fraud and abuse | Usage data, geolocation |
| Comply with legal obligations | All categories as required |
| Recipient | What We Share | Why |
|---|---|---|
| Repair shops (when you request service) | Name, vehicle info, relevant service history | To fulfill your service request |
| Fleet managers (if you are a fleet driver) | Trip data, mileage, uploaded receipts, geolocation during work hours | To provide fleet management services to your employer |
| Service providers | As needed for hosting, email, SMS, analytics | To operate the platform |
| Legal authorities | As required | To comply with law, subpoena, or court order |
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
| Category | Retention Period |
|---|---|
| Account data | Duration of account; deleted within 30 days of deletion request (7-day cancellation window) |
| Vehicle service records | Duration of vehicle ownership + 3 years (BAR requirement) |
| Trip/mileage data | 2 years from date of collection |
| Precise geolocation — consumer (raw GPS) | Not stored. GPS coordinates are used ephemerally to calculate mileage and are zeroed before storage. |
| Precise geolocation — fleet (raw GPS) | 90 days (aggregated/anonymized thereafter) |
| Uploaded documents (raw files) | Duration of account |
| Device telemetry (raw) | 1 year |
| Communications/messages | Duration of account |
| Unclaimed/invited accounts | PII auto-scrubbed after 90 days if account is never activated |
If you are a California resident, you have the following rights:
| Right | Description |
|---|---|
| Know | Request the categories and specific pieces of personal information we collected about you |
| Delete | Request deletion of your personal information |
| Correct | Request correction of inaccurate personal information |
| Opt-Out | Opt out of the sale or sharing of personal information (we do not sell or share) |
| Limit | Limit the use and disclosure of your Sensitive Personal Information |
| Non-Discrimination | We will not discriminate against you for exercising your rights |
| Portability | Receive your data in a portable, machine-readable format |
We verify your identity by matching at least two data points you provide against information we have on file. For deletion requests, we may require additional verification.
You may designate an authorized agent to submit requests on your behalf. The agent must provide signed written authorization, and we may still verify your identity directly.
When you delete your account, we delete your personal information within 30 days, with the following exceptions:
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
If this changes in the future, we will provide a "Do Not Sell or Share My Personal Information" link and honor Global Privacy Control (GPC) browser signals as valid opt-out requests.
You may limit our use of your precise geolocation data to only what is necessary to provide the Service. To exercise this right:
If you limit geolocation use, we will continue to collect mileage data from the OBD-II device (necessary for core service delivery) but will not use precise GPS coordinates for any secondary purposes.
We honor the Global Privacy Control (GPC) signal. When we detect GPC from your browser, we treat it as a valid request to opt out of the sale or sharing of personal information associated with that browser.
Some browsers transmit a "Do Not Track" (DNT) signal. There is no accepted standard for how to respond to DNT signals, and we do not currently respond to them. We honor the Global Privacy Control (GPC) signal as described in Section 9.
When you pair a myodo OBD-II device with your vehicle:
The Service is not directed to individuals under 18. We do not knowingly collect personal information from individuals under 18. If we learn we have collected information from an individual under 18, we will delete it.
We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:
No system is 100% secure. If we discover a breach affecting your personal information, we will notify you as required by California Civil Code § 1798.82.
We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and, for material changes, by email or in-app notification at least 30 days before the change takes effect.
Prior versions are archived at myodo.co/privacy/archive once a new version is published.
SaaS Car, Inc. dba myodo Email: privacy@myodo.co Address: 2608 Portola Way, Sacramento, CA 95818 Phone: 916-258-5456
We use essential cookies to make our site work. We'd also like to set analytics cookies to help us improve. See our Privacy Policy for details.