Privacy Policy

Vanta Auto, workforce app. Last updated June 2026.

Vanta Auto is a private workforce app provided to tire shops for their employees. It is not for the general public, and you use it as a member of a shop's team. Below is what we collect and why.

Vanta Auto is operated by Vanta Brand Scaling LLC ("Vanta", "we") and provided to your employer, your tire shop. Your shop decides which employees use the app and how the performance, task, and coaching data is used in employment decisions; Vanta processes this data on your shop's behalf to provide and operate the app.

What we collect

  • Phone number & account IDs: your phone number signs you in (phone number + password) and identifies your records. Creating an account also assigns you an internal user ID, and your shop's rep login code is attached to your sales numbers.
  • Sales performance: your daily/monthly numbers, pulled from your shop's end-of-day reports and from sales you log yourself in the app.
  • Motivation profile: your answers to the optional motivation quiz, used to tailor coaching.
  • Training & points: modules completed, points earned, rewards redeemed.
  • Task photos & location: when you submit before/after proof of a completed task, we store the photos and your device's location at the moment of submission to confirm the work was done on-site.
  • Time clock location: if your shop uses the time clock, we record the time and your device's location when you punch, including its accuracy. Clocking in requires location and is checked against your shop's geofence to confirm you are on-site; clock-out works from anywhere, and if location is available at that moment it is recorded too. Location is captured only at these two moments (task submissions and time-clock punches), never continuously or in the background, and only after you grant the location permission.
  • Chat messages: your conversations with the in-app assistant are saved to your account so you can revisit them and so the assistant can use your recent messages as context.
  • Voice input: some text boxes have a mic button so you can speak instead of type. Your speech is turned into text by your device's speech service (Apple on iPhone, Google on Android and in Chrome), which may process the audio on its servers under its own terms. We never receive, record, or store the audio itself; only the text that appears in the box is saved, and only if you submit it. The mic is used solely while you hold a dictation session open and only after you grant the microphone permission.
  • Kudos & notes: shout-outs you send to teammates are stored with your name and the recipient's, and are visible to the team.
  • Profile photo: if you upload a profile picture, it is stored and shown to your team inside the app.
  • Push token: if you enable notifications, to send reminders and updates.
  • Sign-in security logs: we record sign-in attempts (including IP address and browser/device info) to protect accounts against unauthorized access.

Customer records your shop keeps

Staff can also save business records about the shop's customers (for example, VIP fleet contacts: name, phone, and vehicles). Those records belong to your shop, are used only to serve its customers, and your shop is responsible for handling them in line with the law.

How we use it

To run your shop's coaching, training, and rewards program. We do not sell your data or share it with advertisers. Data is stored securely and accessed only by your shop's owner, manager, and the app's administrator. Your shop's owner and manager can see the time, date, and location of your time-clock punches and task submissions; by using those features you consent to that visibility.

Service providers

We use a small set of providers to run the app, each receiving only the data needed for its function: Supabase (database, file storage, sign-in), Vercel (hosting: app traffic passes through its servers), Anthropic (AI assistant, coaching notes, and translations), Voyage AI (search indexing of questions and training content so the assistant can find relevant answers), and Apple (push notification delivery). Each processes your data only on our behalf under its data-processing terms; none uses it for advertising.

AI

The in-app assistant and the daily coaching notes are generated using Anthropic's Claude. Your questions and relevant numbers are sent to Anthropic to produce responses, and to Voyage AI to find the most relevant training content for your question. No data is used to train external models.

Your choices

Location, microphone, and notification access are optional iOS permissions, and you can turn any of them off at any time in iOS Settings > Vanta Auto. If you turn off location, you can still use the app, but clocking in (which confirms you're at the shop) won't work until you re-enable it; task-proof photos can still be submitted, just without on-site location verification. Turning off the microphone only disables voice dictation, you can always type instead. Turning off notifications stops reminders, your account and data are unaffected.

Retention, security & changes

Retention: we keep your records while you work at your shop, and afterward only as long as needed for your shop's record-keeping obligations (for example, payroll and time records); then we delete or anonymize them. You can also delete your data yourself at any time (see below). Security: data is encrypted in transit and at rest, and access is restricted by role; no system is perfectly secure. If a breach affects your data, we will notify your shop and you as required by law. Changes: if this policy changes materially, we will update this page and the date above. Scope: this app is a workplace tool provided through your employer; it does not change your employment terms, and your employer's own policies govern your employment.

Deleting your data

You can delete your account and your data at any time from the in-app Accountpage, by contacting your shop's administrator, or by emailing [email protected]. Deletion removes your profile, motivation answers, points, training history, task submissions and their photos, profile photo, push token, and chat history. Time-clock punches, sales records, kudos you sent or received, and sign-in security logs are part of your shop's business and security records and are retained in line with its record-keeping obligations.

State privacy rights: if a state privacy law (such as the California Consumer Privacy Act) applies to your shop, you may send access or deletion requests to [email protected] and we will forward them to your shop.

Peer benchmarks (shop owners)

If your shop uses peer comparisons or best-practice insights, see how we handle de-identified aggregates in our Peer Benchmarks & Best Practices Privacy Policy. That policy supplements this one; your identifiable shop data is never shown to other customers.

Contact

Vanta Auto is operated by Vanta Brand Scaling LLC. For privacy questions or data requests, email [email protected], see also our Support page. For questions about how your shop uses this data, contact your shop's owner or manager.