Last updated: . This document must be reviewed by an attorney before Xulari accepts a paying customer or submits an A2P 10DLC registration.
Xulari provides software that independent auto repair shops use to run their operations. When a repair shop uses Xulari, that shop decides what information is collected about its customers and why. The shop is the controller of that information; Xulari processes it on the shop's instructions.
If you are a customer of a repair shop and want your information corrected or deleted, contact the shop directly. We will assist them, but the decision is theirs.
We do not sell, rent, or share mobile phone numbers with third-party marketers. Ever, and under any circumstances. Numbers are used only to send messages on behalf of the shop the customer visited.
Consent to receive service updates and consent to receive offers are separate choices, made independently at check-in. Offers are never opted in by default.
Replying STOP (English) or BAJA (Spanish) stops all messages, including service updates. Replying START or ALTA resumes service updates only; offers stay off until the customer opts in again. Replying HELP or AYUDA returns contact information. Message and data rates may apply.
Message frequency varies with the work being performed. Promotional messages are limited to four per customer in any thirty-day period, and are not sent between 9:00 p.m. and 8:00 a.m. in the shop's local time zone.
Where a shop photographs a reference document such as an insurance card, registration, or VIN plate, Xulari reads the information from the image, a member of shop staff confirms it, and the image is then deleted. We retain the extracted fields and a record of who confirmed them, not the picture.
Photographs that are evidence of work or damage are retained for as long as the shop decides, under a retention setting the shop controls.
Service records are kept for as long as the shop maintains its account. Document retention is set by each shop, by document type, and can be as short as days or unlimited. A shop's current settings are available from its staff on request.
Each shop's data is isolated at the database level, not merely filtered by our software. Xulari staff cannot browse a shop's customer records as a matter of routine. Access for support requires a reason, is limited in time and scope, and — where customer information is involved — requires the shop's approval. Every such access is recorded in a log the shop can read and export.
Xulari uses machine learning to read documents, draft summaries and draft message copy. This processing runs on infrastructure we operate. We do not use shop or customer data to train publicly available models, and we do not provide it to third parties for that purpose. Every AI-generated output is reviewed by a person before it is used or sent.
We use a small number of providers to operate the service, including a cloud hosting provider and a messaging carrier for text delivery. They act on our instructions and may not use the information for their own purposes.
Data is encrypted in transit and at rest. Documents are encrypted with a key unique to each shop. Access to production systems is limited, logged, and protected by multi-factor authentication.
The service is not directed at children and we do not knowingly collect information from anyone under 13.
We will post material changes here and notify account owners by email before they take effect.
privacy@xulari.com
