Privacy policy
Last updated 2026-11-14
Who we are
Caree is a workshop management assistant for car repair shops, available as an app in ChatGPT and on the web. It is operated by housee s.r.o., Ovčiarsko 210, 010 04 Ovčiarsko, Slovakia; registered in the Business Register of the District Court Žilina, section Sro, file 71188/L, company ID 52059022 (VAT ID SK2120875449) ("we"). Contact: housee@housee.sk.
Our role
- Data of repair-shop customers (drivers, their vehicles, repairs): the repair shop is the controller. We process this data only on the shop's instructions as a processor under a data processing agreement (Art. 28 GDPR, see DPA). Requests about this data should go to the repair shop; we help the shop answer them.
- Data of shop staff accounts (name, e-mail, login data) and of people who contact us: we are the controller.
What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Driver name, phone, e-mail, preferred language | Bookings, estimates, status updates, reminders | Contract with the shop (Art. 6(1)(b)); reminders: shop's legitimate interest with opt-out (6(1)(f)); marketing only with consent (6(1)(a)) |
| Vehicle: VIN, licence plate, make/model, mileage, inspection dates | Service history, estimates, planning, parts identification | Contract (6(1)(b)). A VIN can be personal data when linked to a person. |
| Repairs, inspection findings, photos, approvals, invoices | Running the repair; accounting obligations | Contract; legal obligation (6(1)(c)) |
| Staff account data, sign-in and security logs | Access control, security, audit | Contract / legitimate interest in security |
We do not collect payment card numbers, government ID numbers, passwords of other services, health data or precise location. We do not sell data, show ads, or build behavioural profiles.
ChatGPT
When you use Caree inside ChatGPT, ChatGPT sends Caree only the inputs of the tools it calls (for example a licence plate and the requested service). Caree never asks for your chat history. Your conversation itself is handled by OpenAI under OpenAI's privacy policy.
Recipients and sub-processors
- Hosting: Fly.io, Inc. – servers in the EU (Frankfurt region).
- Parts suppliers chosen by the shop: only the VIN and the parts ordered – never the driver's name or contact.
- Technical data providers (e.g. labour times, VIN decoding) if the shop enables them: VIN only.
- OpenAI, when the shop or driver uses Caree in ChatGPT (results of the tools they call).
Transfers outside the EEA rely on adequacy decisions or Standard Contractual Clauses.
How long we keep data
As long as the shop uses Caree. Inactive drivers are anonymised automatically after the retention period set by the shop (default 10 years, to cover accounting rules). Invoices are kept for the statutory period without personal data where possible. After a shop leaves, data is exported to the shop and deleted within 90 days.
Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Drivers: contact your repair shop (Caree gives the shop one-click export and erasure). Staff and other contacts: write to housee@housee.sk. You can complain to your data protection authority (in Slovakia: Úrad na ochranu osobných údajov SR).
Security
Encryption in transit (TLS), hashed passwords and tokens, strict separation of each shop's data, audit log of changes, regular backups.