WrenchDay Privacy Policy

Explains data collection, use, sharing, retention, privacy requests, cookies, and customer communications.

1. Scope

This Privacy Policy describes how WrenchDay collects, uses, stores, and shares information when shops, mechanics, customers, visitors, and platform operators use the software, public booking pages, public estimate pages, public invoice pages, mechanic portal, communications features, and related services.

2. Information collected

WrenchDay may collect account information, shop profile information, business contact information, mechanic records, customer names, emails, phone numbers, vehicle details, VINs, service history, appointment details, repair orders, estimates, invoices, photos, notes, messages, templates, payment metadata, usage data, device data, authentication data, and support communications.

WrenchDay may receive payment and billing metadata from Stripe, but payment-card numbers are handled by Stripe and are not intended to be stored directly by WrenchDay.

3. How information is used

Information is used to provide the platform, authenticate users, manage shop accounts, schedule appointments, create repair orders, support check-in, store vehicle and customer history, generate estimates and invoices, send communications, process payments, enforce subscriptions, show usage, improve product reliability, prevent abuse, and comply with legal obligations.

AI-related input may be used to generate diagnostic suggestions or other operational output when the customer uses AI-assisted features.

4. Sharing and subprocessors

WrenchDay may share data with service providers that support hosting, database storage, authentication, email delivery, SMS delivery, payment processing, file storage, AI processing, analytics, monitoring, support, and security.

Subprocessors should be listed in the Subprocessor List and updated as providers change.

5. Customer communications

Shops may use WrenchDay to send appointment confirmations, cancellations, reschedules, repair-order approvals, completion messages, invoice payment links, reminders, and other operational or marketing messages.

By providing your mobile phone number and opting in, you consent to receive SMS messages related to appointments, repair orders, estimates, invoices, payment reminders, and other service-related communications. Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for assistance.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties except vendors, messaging providers, or subcontractors that support message delivery. All other categories exclude text messaging originator opt-in data and consent.

The shop is responsible for obtaining and honoring required consent, opt-outs, and communication preferences for its customers.

6. Retention

WrenchDay may retain information for as long as needed to provide the service, support customer accounts, resolve disputes, comply with legal obligations, preserve business records, prevent fraud, and maintain security.

Deletion requests may be limited where retention is required for billing, tax, accounting, fraud prevention, legal defense, repair records, payment history, or legitimate business operations.

7. Privacy rights

Depending on location, individuals may have rights to access, correct, delete, export, restrict, or object to certain processing. WrenchDay and the shop may need to verify identity before processing requests.

Requests involving a shop customer may need to be routed to the shop because the shop controls many customer records entered into the platform.

8. Security

WrenchDay uses technical and organizational safeguards such as authentication, role-aware access, subscription-gated APIs, same-origin checks for sensitive actions, tenant-scoped data access, signed payment webhooks, and infrastructure security controls.

No system is perfectly secure, and customers should protect their accounts, use strong passwords, control staff access, and report suspected incidents promptly.

9. International use

Data may be processed in the United States or other locations where WrenchDay or its subprocessors operate. Cross-border transfer terms may be addressed in the Data Processing Addendum when required.