PartsQuest privacy notice
Privacy Policy
PartsQuest, LLC provides a parts sourcing and comparison desk for repair shops. This notice explains what
information PartsQuest collects, how it is used, and how shop users can control text notifications.
Last updated: November 10, 2026
Information PartsQuest Collects
PartsQuest collects information needed to operate shop accounts, work approved sourcing tickets, document
source results, and send ticket updates.
- Shop and user contact details, such as shop name, contact name, role, phone number, email, city, and state.
- Vehicle and part details, such as year, make, model, VIN when needed for fitment, part description, urgency, and search notes.
- Supplier and dealer parts-contact details, such as public phone numbers, public source URLs, contact notes, availability, price, ETA, and parts-counter contact path.
- Account, billing, security-check, and usage metadata handled through approved service providers such as Stripe, Supabase, Vercel, Cloudflare, and Twilio.
- Notification settings, including the mobile numbers a shop user chooses for PartsQuest text updates.
- Operational records, such as ticket timestamps, result-packet history, support messages, supplier opt-outs, do-not-contact records, quality checks, and security logs.
How PartsQuest Uses Information
- To create and manage shop accounts, requests, result packets, usage records, and saved supplier cards.
- To prepare sourcing briefs, contact approved suppliers or dealer parts departments for authorized tickets, and document outcomes.
- To send transactional service updates about tickets, account access, source results, and billing status.
- To improve supplier/dealer parts-contact quality, dedupe source records, maintain do-not-contact exclusions, and keep audit trails.
- To protect the service, troubleshoot errors, comply with law, and enforce PartsQuest operating boundaries.
- To administer subscriptions, ticket volume, billing status, cancellation requests, support requests, and service capacity.
Account Security Checks
PartsQuest uses Cloudflare Turnstile on public account-access forms to help distinguish legitimate shop users from
automated abuse. Cloudflare may process browser, device, and network signals needed to complete that check.
PartsQuest receives a short-lived verification token and uses it only to validate the account-access request.
Supplier List Imports
When a shop chooses a CSV, spreadsheet, vCard, pasted list, or supported device contact, PartsQuest parses the
original file or selection in that browser. The original file is not uploaded to or stored by PartsQuest. Only
the mapped supplier fields shown in the review screen are sent to PartsQuest, and no supplier card is saved until
an authorized shop user confirms it.
Normalized, unfinished import candidates may be retained for up to 30 days so an authorized shop user can finish
or discard the review. Imported supplier details remain private to that shop and do not seed PartsQuest's shared
reviewed routes. Choosing a contact does not authorize a call. Invoice upload and background address-book access
are not part of this supplier import flow.
Calls, AI Tools, And Call Records
PartsQuest uses an automated AI voice agent, phone-system providers, and speech-to-text and summarization tools
to place supplier and dealer calls, organize what was said, and produce result packets, with optional human
quality review of call records. PartsQuest uses these tools to operate the service, not to sell shop data or
supplier contact data as a standalone database.
PartsQuest may audio-record the supplier and dealer calls it places, and records only where the law that
applies to the call permits a participant to record without the consent of every participant. Where that is
unknown or not permitted, the call is not recorded. Recordings are used to review the quality of the calling
agent, are stored in PartsQuest's private storage, are kept for 30 days after the call is processed and then
deleted by a nightly purge, and are never sold. A supplier or dealer may ask not to be recorded, and PartsQuest honors that request for their number.
PartsQuest also keeps non-audio call records: phone numbers called,
timestamps, call status, summaries, structured
results (availability, price, timing, contact name), provider metadata, opt-out records, and quality notes.
Supplier or dealer opt-outs and do-not-contact requests may be retained to make sure they are honored.
Text Message Privacy
If a shop user opts into PartsQuest text notifications, PartsQuest uses the provided mobile number only for
transactional PartsQuest ticket status and source-result notifications. PartsQuest does not sell mobile numbers, SMS opt-in
data, or SMS consent records. PartsQuest does not share mobile numbers, SMS opt-in data, or SMS consent records
with third parties for their marketing or promotional use. Messaging providers such as Twilio process messages
only to deliver and operate the text notification service.
PartsQuest uses three separate, unchecked opt-in paths. In the shop Settings screen, an authenticated shop owner or admin
enters each mobile number and separately confirms that recipient's consent before shop ticket notifications
can be enabled under the saved trigger. On the public PartsQuest request form, the person submitting the request
may separately check the optional text-consent box for that mobile number. On the PartsQuest ROI page, a person
sending a question may enter a mobile number and separately check the optional box to be texted about that
question. Consent given on either public page is specific to that request or question; it does not enable
shop-wide texting. Leaving a public checkbox unchecked does not prevent the request or question from being
sent. In Settings, an unconfirmed recipient cannot be enabled for texts, but other account settings
can still be saved separately. Each new recipient requires separate consent. Message frequency
varies by ticket activity. Message and data rates may apply. Reply STOP to opt out and HELP for help; a number that
has opted out cannot be re-enabled through shop Settings.
What Not To Send
Do not submit customer names, license plates, repair-order numbers, invoices, payment-card details,
supplier credentials, private supplier terms, customer screenshots, or unrelated personal information.
PartsQuest uses its own ticket ID instead of customer or repair-order identifiers. VINs should be provided only
when needed for fitment or dealer/OE confirmation.
Sharing And Providers
PartsQuest may share limited ticket details with suppliers or dealer parts departments only when needed to
work an authorized sourcing request. PartsQuest also uses service providers for hosting, database, billing,
authentication, messaging, and operations. These providers are used to operate PartsQuest, not to sell shop
data as a standalone database.
Security, Cookies, And Account Access
PartsQuest uses reasonable administrative, technical, and service-provider controls to protect account and ticket
information. No internet service can guarantee perfect security. Shop users are responsible for keeping login
credentials and shared result links within authorized shop personnel.
PartsQuest may use essential cookies, local storage, session identifiers, analytics, error logs, and similar
technologies to keep the site working, remember sessions, understand service usage, and troubleshoot issues.
PartsQuest does not use SMS opt-in data for third-party marketing.
Retention And Requests
PartsQuest keeps account records, request history, supplier/dealer parts-contact QA records, billing metadata, and notification logs
as needed to operate the service, support shops, preserve audit trails, and meet legal or compliance needs.
A shop may ask PartsQuest to review, correct, export, or delete eligible account information by contacting
support@partsquest.org. Call summaries and structured call results are kept with the ticket record while the
shop account is open, and afterward as needed for the purposes above; a shop may ask PartsQuest to delete
eligible records. Call audio recordings are kept for 30 days after the call is processed and then deleted by a
nightly purge, which is shorter than the retention for summaries and structured results. Requests and
questions sent through the public request form or the ROI page that do not become a shop account have their
personal details removed 90 days after they arrive, or sooner when the person asks.
Some records may be retained after an account closes when needed for billing, tax, fraud-prevention, dispute,
audit, security, legal, supplier opt-out, do-not-contact, or service-integrity reasons. PartsQuest may decline or
limit a deletion request when retention is reasonably necessary for those purposes.
State Privacy Rights
Depending on where a shop user lives and whether applicable legal thresholds are met, the user may have rights to
request access, correction, deletion, portability, or opt-out of certain uses of personal information. Oregon
residents may exercise those rights under the Oregon Consumer Privacy Act by emailing support@partsquest.org;
PartsQuest responds within 45 days and will explain how to appeal a decision. PartsQuest does not sell personal
information.