Privacy Policy

You can create an MSJ account either by signing in with Google or by registering directly with an email address and password.

Google Sign-In: if you choose "Continue with Google", Google shares your name, email address, and Google account identity with us so we can create and recognize your MSJ account. We do not receive your Google password, and we do not receive access to your Gmail, contacts, or other Google services. Google account data is used only to authenticate you and to support your MSJ account experience (for example, prefilling your name or showing which method you signed in with) — it is never used for advertising, profiling, or shared with third parties beyond what is needed to operate sign-in.

Email & password sign-in: if you register with an email and password instead, your password is created, verified, and stored entirely by our authentication provider, Supabase Auth, using industry-standard hashing. MSJ Performance never sees, stores, or logs your password in plain text, and it is never written to our own application database.

If you already have a Google-based account and later add a password (or vice versa), this simply adds a second way to sign in to the same account — it does not create a second, separate MSJ account, and your Garage, Cart, Saved Parts, and Orders stay attached to the one account either way.

In Account Settings you may optionally provide your first name, last name, phone number, country, city, and a preferred contact method (WhatsApp or email). This information is used to personalize your account, prefill order requests, and let our team reach you about an order in the way you prefer.

Vehicles you save to "My Garage" (year, model, variant, chassis code, and engine) are stored against your account so the catalog can show which parts fit your BMW and so fitment doesn't need to be re-entered on every visit. One vehicle can be marked "active" at a time to drive fitment matching across the site.

Items you add to your cart or save to Saved Parts are linked to your account so they persist across devices and sessions. If you add items while browsing as a guest and then sign in, your guest cart and saved items are merged into your account automatically.

Cart and Saved Parts reference products by their catalog listing at the time — if a product is later removed from the catalog, the reference simply shows as unavailable rather than exposing any other customer's data.

When you submit an order request, we store the items, quantities, and prices exactly as they were at the moment of submission — together with the vehicle and contact details you provided — as a permanent historical record of that request.

This is deliberate: order history is designed to remain accurate and readable even if a product listing, price, or vehicle detail is later changed or removed from the live catalog, so your past orders always reflect what you actually requested.

MSJ Performance uses cookies set by Supabase Auth to keep you signed in between visits and to distinguish your session from anyone else's. These are functional/session cookies, not third-party advertising cookies.

We also collect basic technical information — such as page views, device/browser type, and IP address — through Vercel's built-in analytics and through security logging (for example, to rate-limit sign-in and password-reset attempts and to detect abuse). This technical data is used for reliability, security, and understanding overall site usage, not to identify or track individuals for marketing.

Customer accounts, profiles, Garage vehicles, cart and Saved Parts data, and order records are stored in Supabase, our database and authentication provider, protected by row-level security so each customer can only read or write their own data. Product images and uploaded listing photos are stored in Supabase Storage under the same access controls.

The MSJ Performance website itself is hosted on Vercel. Administrative access to customer data is restricted to authorized MSJ staff through a separate, credentialed admin system that is not accessible to customers or the public.

We share the minimum data necessary with the service providers that operate the site on our behalf, and only for that purpose:

• Supabase — database, authentication, and file storage for your account, Garage, Cart, Saved Parts, and Orders.

• Google — authentication only, when you choose "Continue with Google".

• Vercel — website hosting and basic, aggregate site analytics.

• Zoho Mail — delivering account-related emails such as sign-up verification, password reset, and order confirmations.

We do not sell your personal information, and we do not sell or share Google user data with data brokers or advertisers. Data is shared with these providers only to operate the features described in this policy.

We keep your account, profile, Garage, Cart, and Saved Parts for as long as your account is active. Order request records are kept as permanent historical business records (see "Orders & Historical Order Snapshots" above), including for accounting, warranty, and dispute-resolution purposes, even after other account data is deleted.

You may request deletion of your account and associated profile, Garage, Cart, and Saved Parts data at any time by contacting us — see "Your Rights" below. Some records may need to be retained where required for accounting, fraud prevention, or legal compliance.

You can review and update your profile information at any time in Account Settings, and you can change how you sign in (add or change a password, or continue using Google) from the same page.

To request access to, correction of, or deletion of your personal information, or if you have any question about this policy, contact us at support@msjperformance.com.

MSJ Performance is based in Jordan. If you contact us or create an account from another country, your information may be processed in Jordan or by our service providers listed above, which may operate infrastructure in other countries.

We may update this policy as MSJ Performance's features change. Material changes will update the "Last updated" date below.