Privacy policy

Who we are

CarDoc.ca (“CarDoc”, “we”) is a free, independent guide to car repair prices in Canada, developed by DigitalFix. This policy explains what personal information we collect, why we collect it and the choices you have. For any question or request, email support@cardoc.ca.

Using CarDoc without an account

You can check a quote, estimate a repair and read our guides without an account. The vehicle, repair, province and price you enter are used only to show your result and are not saved. They appear in the page address (URL), so anyone you share that link with can see them.

Your account

An account is optional. If you create one, we keep your name, email address, province, a securely scrambled (hashed) version of your password, and when you confirmed your email. You can change these, or delete your account, on your account page at any time.

• If you continue with Google, Google tells us your name, your email address and that Google has confirmed it. We keep a link to your Google account so you can sign in again. We don’t receive your Google password and we don’t keep your Google profile photo or access to your Google account.
• We use your email address to confirm it, to reset your password, and for messages about your account.
• If you use My Garage, we keep the vehicles, km readings and expenses you enter. Only you can see them. You can download them as a CSV file, and deleting a vehicle deletes its readings and expenses.
• When you delete your account, we delete it, its garage and its Google link straight away. Prices you shared are not linked to your account and stay on CarDoc.

When you share what you paid

If you choose to share a price, we collect: the vehicle, the repair, your province, your city (optional), the type of shop, the month of the work, the amounts, whether it was a quote or a paid bill, the parts type (optional), the shop’s name (optional) and a receipt photo (optional).

• Prices are shown publicly only as combined figures from at least three prices, never one by one.
• The shop’s name and the receipt photo stay private. We use them only to check that a price is genuine.
• Receipt photos are deleted automatically after 30 days.
• We keep a one-way coded version (a “hash”) of your internet (IP) address to spot duplicates and abuse. We don’t keep the address itself.

Waitlist emails

If you join the waitlist, we keep your email address, when and where you agreed, and a hashed IP address. We use your email only to tell you about CarDoc. Every email has an unsubscribe link, and you can ask us to delete your address at any time.

Cookies

We use only the cookies the site needs: a session cookie and a security token that make forms work safely, a cookie that remembers your light or dark theme, and, if you choose “Keep me logged in”, a cookie that keeps you signed in. We don’t use advertising or analytics cookies. If that changes, we will update this policy first and ask for your consent where the law requires it.

Services we use

• Hosting: our website and database are run by a hosting provider whose servers may be outside Canada, including in the United States, where the information may be subject to local laws.
• Cloudflare Turnstile protects our forms from bots. To do that, Cloudflare processes technical information such as your IP address and browser details, under Cloudflare’s privacy policy.
• Email: when we send emails, an email delivery service handles the address and the message.
• Google: if you choose “Continue with Google”, Google signs you in and shares your name and email address with us, under Google’s privacy policy.
• eBay: the estimator can show current part listings from eBay.ca. To get them, our server sends eBay only the search words (vehicle year, make, model and part), never anything about you. If you open a listing, you are on eBay’s site and eBay’s privacy notice applies. We don’t receive or keep personal information about eBay users.

Server logs

Like most websites, our host records technical details of each visit (IP address, browser, pages visited and time) to keep the site secure and to fix problems. These logs are kept according to the host’s schedule.

Sharing

We don’t sell or rent personal information. We share it only with the service providers above, to run CarDoc, or when the law requires us to.

How long we keep it

• Your account and garage: until you delete them.
• Receipt photos: 30 days.
• Shared prices and their hashed IP addresses: as long as the price is part of CarDoc’s data, or until you ask us to delete it.
• Waitlist email addresses: until you unsubscribe or ask us to delete them.
• What you type in the quote checker and estimator: not kept.

Security

We use encrypted connections (HTTPS), keep private files out of public reach, and limit admin access to a small team using two-factor sign-in. No system is perfectly secure, but we work to protect your information.

Your rights

You can ask to see the personal information we hold about you, to correct it, or to delete it, and you can withdraw your consent at any time. Email support@cardoc.ca and we will reply within 30 days. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in Quebec the Commission d’accès à l’information.

Children

CarDoc is not meant for children under 13, and we don’t knowingly collect their information.

Changes

We will update this policy when what we do changes, and change the date at the top. Significant changes will be noted on the site.