Tire Villa

1. Introduction

TireVilla ("we," "us," or "our") operates a mobile tire service booking platform accessible at our website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. It also describes your rights under applicable law, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Service.

2. Information We Collect

We collect information you provide directly, information generated through your use of the Service, and information from third party service providers.

 

2.1 Information You Provide Directly

When you use TireVilla to request a tire service estimate or complete a booking, we collect:

Full name

Email address

Phone number

Service address (including city, state, and ZIP code)

Unit or apartment number (if applicable)

Gate or access notes (if applicable)

Vehicle information, including year, make, model, and license plate number

Tire size and specifications

Tire quantity and configuration (including staggered fitment details)

Payment information, we do not store your credit or debit card details directly. Payment is processed by Stripe, a third party payment processor. We receive and store a Stripe Payment Intent ID and payment status only.

Discount codes you enter during checkout

2.2 Information Generated Through Your Use of the Service

When you interact with TireVilla, we automatically generate or collect:

Service address geolocation data, when you enter your address, we geocode it using the Google Maps Geocoding API to determine your latitude, longitude, city, state, and ZIP code in order to find a nearby shop and calculate applicable taxes and fees

Address autocomplete queries, partial address text you type is sent to the Google Places Autocomplete API to generate suggestions

Booking records, including appointment date, booking status, payment status, tracking code, and timestamps

Receipt tokens and session identifiers, temporary cryptographic tokens generated to secure your payment confirmation page and prevent unauthorized access to your receipt

Session storage data, your booking data is temporarily stored in your browser's session storage during the booking flow. This data is cleared when your browser session ends.

2.3 Information We Receive from Third Parties

Tire inventory and pricing data, we query a Google Sheets backed inventory system to retrieve tire information based on your tire size, brand, and type preferences. Queries include your selected tire size, brand, and type.

Payment processing data, Stripe provides us with a payment intent identifier and payment status (authorized, captured, or declined) upon completion of a transaction. We do not receive or store your full card number, CVV, or billing address.

Geographic and tax data, we use your city and state to look up applicable sales tax rates and California state tire disposal fees from our internal database.

3. How We Use Your Information

We use the information we collect for the following purposes:

To process and fulfill your booking, including scheduling your appointment, routing your order to the appropriate service shop, and coordinating tire delivery

To calculate pricing, including tire cost, service fees, applicable sales tax, and California new tire disposal fees

To process payment, we transmit your booking total and platform fee to Stripe to create a checkout session and subsequently capture or void the payment authorization

To send you a booking confirmation email, upon successful payment, we send a transactional confirmation email to the address you provided, containing your tracking code, appointment date, order details, and price breakdown. This email is sent via Resend, a third party email delivery service.

To notify the service shop of your order, the shop assigned to your booking receives an order notification email containing your booking details. This is sent to the shop owner's email address on file.

To enable order tracking, your tracking code allows you to look up the current status of your booking

To prevent fraud and duplicate transactions, we use cryptographic receipt tokens, session identifiers, and idempotency checks to ensure that confirmation emails are sent only once and that payment confirmations cannot be replayed or accessed by unauthorized parties

To enforce booking availability limits, we use your appointment date selection and the shop's capacity configuration to ensure bookings do not exceed daily service limits

To manage blackout dates, shops may block specific dates from receiving bookings; this is enforced using your selected appointment date

To fulfill distributor and shop operational needs, aggregated and individual booking data is made available to authorized shop operators and distributors through authenticated dashboards so that tires can be ordered and service can be coordinated

To improve the Service, we may review booking data, error logs, and usage patterns internally to improve platform reliability and service quality

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Shops

The tire service shop assigned to your booking receives your name, phone number, service address (including any unit number or gate access notes), vehicle information, tire details, appointment date, and booking status. Shop owners access this information through a password protected dashboard.

4.2 Distributors

Authorized tire distributors receive aggregated order information, including tire size, brand, model, type, quantity, and the associated shop name and address, in order to fulfill tire delivery for confirmed, paid bookings. Distributors access this through a separate authenticated dashboard and do not receive your personal contact information.

4.3 Third Party Service Providers

We share data with the following third party providers as necessary to operate the Service:

Provider
Purpose
Data Shared

Stripe
Payment processing
Booking total, platform fee, booking ID, shop Stripe account ID

Google Maps Geocoding API
Address geolocation
Your entered address text

Google Places API
Address autocomplete suggestions
Partial address text as you type

Google Sheets / Google Apps Script
Tire inventory lookup
Tire size, brand, type

Resend
Transactional email delivery
Your email address, name, booking details, pricing breakdown

Wix
Website hosting and data storage
All data collected through the Service is stored on Wix's infrastructure

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process, including a subpoena, court order, or government demand, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website if such a transfer occurs and your information becomes subject to a different privacy policy.

5. Cookies and Browser Storage

We use browser session storage (not cookies) to temporarily hold your booking data, including tire selection, pricing, address, and shop assignment, across the steps of the booking flow. This data exists only for the duration of your browser session and is not transmitted to any tracking or advertising service.

We do not currently use advertising cookies, tracking pixels, or behavioral analytics tools. Our website is hosted on Wix, which may set its own operational cookies. Please refer to Wix's Privacy Policy for information about cookies set at the platform level.

6. Data Retention

We retain booking records, including your personal information and payment status, for as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

Temporary data such as receipt tokens, session identifiers, and autocomplete queries are either short lived by design (receipt tokens expire 15 minutes after payment) or are not stored persistently.

If you wish to request deletion of your data, see Section 8 below.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

Cryptographic password hashing, shop and distributor account passwords are hashed using PBKDF2 with SHA 512, 150,000 iterations, and a unique random salt per account. Plaintext passwords are never stored.

Session tokens, shop and distributor sessions are authenticated using cryptographically random session tokens stored server side with expiration timestamps.

Receipt tokens, payment confirmation pages are protected by single use, time limited cryptographic tokens. Once accessed, a receipt is locked to the browser session that first loaded it.

Backend authorization, all shop and distributor dashboard operations verify session tokens server side before returning or modifying any data.

Stripe, all payment processing occurs through Stripe's secure infrastructure. We do not handle raw card data at any point.

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your information.

8. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA and CPRA:

8.1 Right to Know

You have the right to request that we disclose what personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it is shared.

8.2 Right to Delete

You have the right to request deletion of personal information we have collected about you, subject to certain exceptions (for example, where we are required to retain information to complete a transaction, comply with a legal obligation, or detect security incidents).

8.3 Right to Correct

You have the right to request that we correct inaccurate personal information we hold about you.

8.4 Right to Opt Out of Sale or Sharing

We do not sell your personal information, and we do not share it for cross context behavioral advertising purposes. You do not need to opt out.

8.5 Right to Non Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of quality because you exercised a right under this policy.

8.6 How to Submit a Request

To exercise any of the rights above, please contact us using the information in Section 11. We will respond to verified requests within 45 days. We may need to verify your identity before processing your request, which may require you to provide your name, email address, and information about a recent booking.

9. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child under 16, please contact us immediately and we will delete it.

10. Third Party Links and Services

The Service may contain links to third party websites or depend on third party services (such as Stripe's hosted checkout page). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third party services you interact with.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your California privacy rights, or want to report a privacy concern, please contact us at:

TireVilla

Email: [your contact email]

Website: [your website URL]

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will make reasonable efforts to notify you, such as by posting a notice on our website. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

This policy was written to reflect the actual data practices of TireVilla as implemented, including geocoding, address autocomplete, tire inventory lookup, Stripe payment processing, Resend email delivery, Wix data storage, and shop/distributor dashboard access.