Your station's records stay with your station

Only your team can open them. Card numbers never reach our servers. You can take a copy or delete them any time.

How we protect your records

Only the people you add to your station can open its records.

Each station is kept separate: Customers, cars, work orders and invoices belong to one station. The database itself lets only that station’s members read them. Another station can never see yours.
Four roles: Owner, manager, technician and viewer. A viewer can look but not change anything. Only an owner can change the plan or make someone else an owner.
A record of changes: Owners and managers see an activity log of changes to the station, the team and its connections.

Each person signs in with their own account, so each work order shows who did the work.

Email, Google or Apple: Sign in with your email and a password of at least 8 characters, or with your Google or Apple account.
Password resets by email: If you forget your password, we email you a link to choose a new one.
Invite codes expire: Team invites are codes you hand over yourself. Each works once, expires after seven days and can be revoked.

SmogScanner never stores a full card number.

Plan payments go through Stripe: Plans are paid on Stripe’s secure page. Card numbers go to Stripe, never to our servers.
No full card numbers: When you record a card payment at the counter, we keep only the last 4 digits and the authorization code.
Payment account keys kept apart: The keys that connect your Stripe, Square or Clover account are kept in an encrypted vault, apart from your records.

What you share with a customer is for that customer only.

Customer links expire: Receipt and pay links you send a customer stop working after a set time. We tell search engines not to list receipt and estimate pages.
Private photos: Photos taken on a work order are kept in private storage that only your station’s members can open.
Encrypted connections: The website and the phone apps talk to our servers over HTTPS, so what you send is encrypted on the way.

Station records belong to your station.

Take a copy any time: Download every work order, your customers and your reports as spreadsheets, as often as you like.
Delete your account: Delete your account in Settings. A closed station is kept for 90 days in case you change your mind, then deleted for good.
Not for sale: We don’t sell your data, and we don’t use it to train AI models.

If something looks wrong, or you see records that aren't yours, email support@smogapp.com. Our privacy policy says what we collect.