Privacy policy
How Lot Helix handles your information.
The short version
- We collect only what you give us: your account details and the yard information you enter.
- We do not run ads, we do not sell your data, and this site has no tracking or analytics.
- Your yard data is stored in your company’s private cloud workspace, which only your team can open.
Last updated October 12, 2026
What we collect
Account details you enter when you sign up (your name, email, company name and yard type) and the information you add to the app: vehicle records, lot layouts, team names and access codes, notes and photos.
Where it is stored
Accounts and yard data are stored with our database and sign-in provider, Supabase, in the United States. Each company’s data is kept in a separate workspace, and database rules allow only that company’s owners and drivers to read or change it. The website itself is served by Cloudflare. Vehicle photos, release signatures and photos of release paperwork are kept in private storage that only your company’s signed-in team can open, through links that expire after an hour. For release records we keep only the last four digits of an ID number. To work without signal, the app keeps a copy of your company’s yard data on each signed-in phone until it syncs; signing out removes it.
Passwords and access codes
Passwords are handled by Supabase Auth and stored only as one-way hashes; we never see them. Driver access codes are at least 10 characters, are shown once when created, and are stored only as a keyed hash, so not even we can read them back. Repeated wrong codes are slowed down and locked out. An owner can replace or cancel a code at any time.
Third parties
When you use photo VIN reading, that photo is sent to Anthropic’s Claude service to read the VIN and is not stored by Lot Helix. VINs are looked up in the free U.S. NHTSA vehicle database to fill in the year, make and model. Fonts load from Google Fonts, so Google receives your IP address as it does for any font request. Sign-in and data storage are provided by Supabase, and its sign-in library is loaded from the jsDelivr network.
Cookies and tracking
We do not use advertising or analytics cookies. We use your browser’s local storage to keep you signed in and to remember display settings such as light or dark theme.
Your choices
You can export your vehicles from the app menu at any time. To have your company’s account and data deleted, or to ask us about anything, email support@thrashdigital.com.
Children
Lot Helix is made for businesses and is not meant for children.
Changes and contact
If this policy changes, the date above changes. Operator: Thrash Digital LLC, 4501 Jackson St Extension, Ste C #217, Alexandria, LA 71303.