Privacy Policy

Last updated: January 21, 2026

1. Introduction

Welcome to Vehra, a product of JACOBSAMO ("Company," "we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

  • Register for an account or sign up for our waitlist
  • Use the Service to manage your vehicles
  • Subscribe to premium features or make purchases
  • Contact us for support or provide feedback
  • Participate in surveys, promotions, or contests

This information may include:

  • Name, email address, and phone number
  • Account credentials and profile information
  • Vehicle information (make, model, year, VIN, license plate, registration details)
  • Maintenance records, service history, and mileage data
  • Insurance policies and warranty documents
  • Payment and billing information
  • Communications and correspondence with us

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

  • Device information (device type, model, operating system, unique device identifiers)
  • Log data (access times, pages viewed, app crashes, system activity, hardware settings)
  • Location data (with your explicit permission, for location-based services)
  • Usage data (features used, interactions, preferences, and patterns)
  • Network information (IP address, mobile carrier, browser type)

2.3 Information from Third-Party Services

We may receive information about you from third-party services that we integrate with, including:

  • WorkOS: We use WorkOS for enterprise authentication and single sign-on (SSO). When you authenticate through WorkOS, we may receive your name, email address, and organizational information.
  • Convex: We use Convex as our backend data platform. Data you provide to the Service is stored and processed through Convex's infrastructure.
  • RevenueCat: We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat processes your purchase information and provides us with subscription status and transaction data.
  • Analytics providers: We use analytics services to understand how users interact with our Service.

3. How We Use Your Information

We use the collected information for various purposes, including to:

  • Provide, operate, maintain, and improve our Service
  • Create, manage, and secure your account
  • Process transactions, manage subscriptions, and send related information
  • Send reminders for maintenance, insurance renewals, registration deadlines, and other vehicle-related events
  • Respond to your inquiries, comments, and provide customer support
  • Send promotional communications, newsletters, and marketing materials (with your consent)
  • Monitor and analyze usage patterns, trends, and activities
  • Detect, investigate, and prevent fraudulent transactions, security threats, and other illegal activities
  • Personalize and improve your experience with the Service
  • Comply with legal obligations and enforce our terms and policies
  • Develop new features, products, and services

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

  • Convex: Backend data storage, real-time synchronization, and serverless functions
  • WorkOS: User authentication, enterprise SSO, and directory sync
  • RevenueCat: Subscription management, in-app purchases, and billing
  • Cloud hosting providers: Infrastructure and data storage
  • Analytics providers: Usage analytics and performance monitoring
  • Communication services: Email delivery and push notifications

4.2 Other Circumstances

  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as a business asset
  • Legal Requirements: When required by law, legal process, or government request, or to protect our rights, privacy, safety, or property
  • With Your Consent: When you have given explicit consent to share information with specific third parties
  • Aggregated Data: We may share aggregated, anonymized data that cannot reasonably identify you

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Storage and Security

Your data is primarily stored and processed through Convex's secure infrastructure. We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit using TLS/SSL and at rest using AES-256
  • Regular security assessments, penetration testing, and vulnerability scanning
  • Access controls, multi-factor authentication, and role-based permissions
  • Secure data centers with physical security measures and redundancy
  • Employee training on data protection and security best practices
  • Incident response procedures and breach notification protocols

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

  • The length of time we have an ongoing relationship with you
  • Whether there is a legal obligation to which we are subject
  • Whether retention is advisable in light of our legal position (such as applicable statutes of limitations, litigation, or regulatory investigations)

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain certain data. Some information may persist in backups for a limited period but will not be actively used.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request a copy of the personal information we hold about you in a structured, commonly used, and machine-readable format.

7.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request that we delete your personal information, subject to certain exceptions provided by law.

7.4 Restriction and Objection

You may have the right to restrict or object to certain processing of your personal information.

7.5 Marketing Communications

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

7.6 Withdraw Consent

Where we rely on consent to process your information, you have the right to withdraw that consent at any time.

To exercise these rights, please contact us at support@jacobsamo.com. We will respond to your request within the timeframe required by applicable law.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States where our service providers (Convex, WorkOS, RevenueCat) operate. These countries may have different data protection laws than your country.

When we transfer personal data internationally, we implement appropriate safeguards such as:

  • Standard Contractual Clauses approved by relevant authorities
  • Data processing agreements with our service providers
  • Compliance with applicable data transfer mechanisms

9. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@jacobsamo.com. If we discover that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  • Right to Opt-Out: You have the right to opt-out of the sale of your personal information. However, we do not sell personal information.

To exercise your CCPA rights, contact us at support@jacobsamo.com.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

  • The right to access, correct, update, or request deletion of your personal information
  • The right to object to processing of your personal information
  • The right to request restriction of processing
  • The right to data portability
  • The right to withdraw consent at any time
  • The right to lodge a complaint with a supervisory authority

Our legal bases for processing personal information include: contract performance, legitimate interests, consent, and legal obligations.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your activity on our Service. These technologies help us analyze trends, administer the Service, track users' movements, and gather demographic information.

You can control cookies through your browser settings and other tools. However, disabling cookies may limit your ability to use certain features of our Service.

13. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policy of every site you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

  • Posting the updated Privacy Policy on this page
  • Updating the "Last updated" date at the top
  • Sending you an email notification (for significant changes)
  • Displaying a prominent notice within the Service

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

JACOBSAMO

Operating Vehra

Email: support@jacobsamo.com

16. Third-Party Service Links

For more information about our third-party service providers, please visit: