Privacy policy
Last updated: 2 November 2026
This policy explains how Morbec Group handles personal data on morbecgroup.com and in Morbec Autoboard (app.morbecgroup.com). We collect as little as we can and we never sell personal data.
Who we are
Morbec Group is a business registered in Ireland, run by Evandro Becari as a sole trader. For anything about your data, write to hello@morbecgroup.com.
For the data a workshop stores about its own customers (names, phone numbers, vehicles, jobs), the workshop is the controller and we act as its processor, following the workshop's instructions.
What we collect
Account data: name, email, password (stored only as a secure hash), role and the workshop's details.
Workshop data: customers, vehicles, quotes, job cards, photos, parts, invoices and finance records that the workshop enters.
Billing data: plan and payment status. Card details go straight to Stripe; we never see or store them.
Founding shop form: the details you send us, used only to talk to you about the pilot.
Technical data: basic logs (IP address, browser, pages requested) kept for security and to fix errors, and cookieless visit statistics on this website.
Why we use it (legal basis)
To provide the service you signed up for (contract).
To bill your subscription and meet tax and accounting rules (legal obligation).
To keep the service secure, prevent abuse and improve it (legitimate interest).
To reply to the founding shop form (your request / legitimate interest).
The AI assistant
When someone in a workshop uses the assistant, the question and the workshop data needed to answer it are sent to Anthropic, which provides the AI model. Anthropic processes it to give the answer and does not use it to train its models.
Assistant conversations are kept in the workshop's account so people can come back to them.
Who processes data for us
Vercel (hosting, Dublin region), Turso (database, Ireland), Cloudflare R2 (photos and files, EU storage), Resend (system emails), Stripe (payments) and Anthropic (AI assistant).
Some of these companies are based in the United States. Where data leaves the EU, the transfer is covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
Workshop data stays while the account is active. If a workshop leaves, we delete its data within 90 days, except what the law requires us to keep (for example, invoices).
Daily backups are kept for about a month (one copy per day, the oldest replaced each day). Founding shop form messages are deleted within 12 months if no account is created.
Your rights
Under the GDPR (EU) and the LGPD (Brazil) you can ask to access, correct, delete or export your data, and object to or restrict how we use it. Write to us and we will reply within one month.
If you are a customer of a workshop, contact that workshop first; we will help it answer you.
You can complain to the Irish Data Protection Commission (dataprotection.ie) or, in Brazil, to the ANPD.
Changes
If we change this policy in a way that matters, we will tell account owners by email before it takes effect.