Privacy policy

Effective date: October 12, 2026

This policy explains what personal information CJR Performance Inc. (“CJR Performance”, “we”) collects through the CJR Performance app and website, why, and your choices. CJR Performance Inc., 1-1010 Brock Rd, Pickering, Ontario L1W 3E5, Canada. Contact: christian@cjrperformance.com.

Accounts and sign-in

Client accounts are invite-only. CJR Performance creates your account and sends you a personal sign-in link. Each link works once and expires; signing in keeps you logged in on that device for up to 30 days. CJR staff use a separate, password-protected admin login.

What we collect

• Contact details: your name and email address (and phone number or city if you give them to us), used to set up your client account and send your sign-in link.
• Vehicles: details of the vehicles we work on for you (for example make, model, year, trim, colour, VIN if provided, and specs you or we enter).
• Build history: modifications and work done on your vehicles, and optional costs.
• Time slips: drag-strip results (dates, tracks, times and speeds) and photos of paper time slips.
• Photos: pictures of your vehicles that we add.
• Technical data: sign-in sessions, the browser/device type, IP address for security and rate limiting, and push-notification subscriptions if you turn notifications on.

How we use it

To run your client account: show your garage, build history and time slips; send sign-in links and event reminders you opted in to; and keep the service secure.

There are no ads in the app or on the website, and we never sell your information.

Public and private

Your vehicles are private until they are made public. You can make your own vehicles public or private at any time in My garage; CJR staff only make a client’s vehicle public with the owner’s permission. When a vehicle is public, its showcase page, photos, build list and time slips can appear on the public site and leaderboard. VINs and build costs are never shown publicly.

Cookies and sessions

We use a small number of essential cookies: a sign-in session cookie (secure, http-only) so you stay logged in, a separate staff admin cookie, and a short-lived cookie that remembers where to send you after sign-in. We do not use advertising or third-party tracking cookies.

Service providers

• Hosting: the app, database and uploaded photos are hosted on Railway (railway.com). Data may be stored on servers outside Canada (for example in the United States).
• Time-slip reading: when CJR staff scan a paper time-slip photo, the image is sent to Google Gemini (Google’s AI service) to read the numbers, and staff check the result before saving. Time-slip photos are stored privately and are visible only to CJR staff.
• Email and notifications: sign-in links may be sent through an email provider, and push notifications through your browser’s push service.

These providers process data on our behalf to provide the service.

How long we keep it

We keep your account and vehicle records while you are a CJR client. Sign-in links expire and work only once, and sign-in sessions expire after 30 days. If you ask us to delete your account, we delete your data within 30 days, except records we must keep by law (for example business and tax records, usually up to 7 years).

Deleting your account

You can request deletion of your account and data at any time: in the app under My account, or on our website at /delete-account. Requests are reviewed and processed by CJR Performance, and we confirm by email.

Your rights

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), you can ask to see the personal information we hold about you, ask us to correct it, and withdraw consent (which may mean we can’t provide the app to you). If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Security

Connections are encrypted (HTTPS). Sign-in links work once and expire, sessions are stored as hashes, and staff areas need a separate password. No system is perfectly secure; tell us right away if you think your account was misused.

Children

The app is for CJR Performance clients and is not directed to children under 16.

Changes and contact

We will update this page if our practices change and show the new effective date. Questions or requests: christian@cjrperformance.com, CJR Performance Inc., 1-1010 Brock Rd, Pickering, Ontario L1W 3E5, Canada.