Privacy Policy

Who we are

Wrenchable Software LLC ("we," "us," "our") is a Florida limited liability company that operates the Wrenchable software-as-a-service platform for mobile RV repair technicians and small service shops. The Service provides customer relationship management, scheduling, estimating, invoicing, and integrated business communications. Throughout this policy, "you" refers to the business owner or technician who creates an account; your customers are referred to as "your customers."

What we collect

Information you provide

• Account information: name, email, business name, phone, mailing address
• Customer records you create: customer names, phone numbers, email addresses, mailing addresses, vehicle information, job history, notes
• Business content: estimates, invoices, photos attached to jobs, time entries, service notes
• Payment method information for subscription billing (processed by Stripe; we never see or store full card numbers)

Information generated through use

• Messages sent and received through the platform (SMS / voice call records / voicemails)
• Server logs (IP address, browser type, timestamps, page paths) used for security and debugging
• Aggregated usage metrics for product improvement

Information you connect from third parties (optional integrations)

• Bank account data (via Plaid): if you connect a bank or credit-card account, Plaid Inc. shares account names, balances, transactions, and identity attributes with us to power bookkeeping automation and payment reconciliation. See Plaid's End User Privacy Policy for how Plaid handles your data.
• QuickBooks Online (via Intuit): if you enable the QBO integration, we read and write accounting records (invoices, expenses, chart-of-accounts entries) using OAuth tokens you grant.
• Email (via Google): if you enable the Gmail integration or sign in with Google, we read incoming business email and classify it using AI. We only access messages sent to addresses you explicitly authorize.
• Distributor accounts: if you connect Meyer, Keystone (NTP-STAG), Lippert, or similar wholesale parts accounts, we use the credentials you provide to fetch live pricing and place purchase orders on your behalf.
• Location (optional): if you enable mileage tracking, we use your device's GPS to record drive routes between jobs. You can disable this at any time in Settings.

How we use information

• To provide and maintain the service (display your data, transmit messages on your behalf, process subscription payments)
• To send you account notifications (sign-in alerts, billing receipts, service announcements)
• To enforce our Terms of Service and protect against fraud or abuse
• To improve product features through aggregated, de-identified analytics

Who we share information with

We share information with the following service providers, only as needed to deliver the service:

• Twilio Inc. — voice and SMS infrastructure
• Stripe, Inc. — payment processing for subscription billing and (where you have opted in) customer payment collection via Stripe Connect
• Supabase Inc. — database, file storage, and authentication infrastructure
• Vercel Inc. — application hosting and edge network
• Plaid Inc. — bank-account connectivity (only if you connect a bank)
• Intuit Inc. — QuickBooks Online sync (only if you enable the integration)
• Google LLC — email integration and Sign-In with Google (only if you enable)
• Anthropic, PBC — AI features powered by Claude, processed on your tenant's data only when you opt in
• OpenAI, OpCo, LLC — AI features for specific tasks (e.g., transcription), processed on your tenant's data only when you opt in
• Apple Inc. and Google LLC (APNs / FCM) — push notifications to the native mobile app, if installed

We do not use your data to train AI models that benefit other tenants or third parties. AI sub-processors (Anthropic, OpenAI) are contractually bound to not retain or train on inputs we send them.

We will disclose information when required by valid legal process (subpoena, court order, government request) or to investigate suspected fraud, abuse, or security incidents. We do not sell your information or your customers' information to data brokers, advertising networks, or any other third party.

Data retention

We retain account and customer data for as long as your account is active plus 90 days after cancellation, during which you can export or reactivate. After that we delete it, except for records we are legally required to retain (tax records: 7 years; payment-dispute records as required by Stripe). Communication records (messages, voicemails) are retained for up to 24 months by default, configurable in your account settings.

Bank-connection data: if you disconnect a bank, we delete the encrypted Plaid access token immediately and stop fetching new transactions. Previously fetched transactions remain in your bookkeeping records so your historical reports stay intact; you can request earlier deletion at any time via the contact below.

Your rights

You can:

• Access and download a copy of your data via Settings → Data → Export
• Correct or update account information directly in the app
• Delete your account at any time via Settings → Account → Close account
• Request specific data deletion or rights questions by email at privacy@wrenchable.io

California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to delete that information. Contact us at the email above to exercise these rights.

Security

We use industry-standard security practices:

• Encryption in transit: TLS 1.2+ on all connections
• Encryption at rest: AES-256 on the database, file storage, and backups. OAuth tokens (Plaid, Gmail, QuickBooks) are additionally AES-256-GCM encrypted at the application layer before storage, so a database compromise alone would not yield usable tokens.
• Row-Level Security: Postgres enforces tenant isolation at the database level — your data is never queryable by another tenant.
• Multi-factor authentication: TOTP authenticator-app MFA is available for all user accounts and is required by policy for any account that connects a bank.
• Least-privilege admin access: our team uses scoped tokens for support and does not log into tenant accounts without consent.

No system is perfectly secure. If a breach affects your data we will notify you without undue delay, consistent with applicable law.

Cookies

We use functional cookies for authentication and to remember your preferences (theme, navigation state). We do not use advertising or cross-site tracking cookies.

Children

Wrenchable is intended for business use by adults. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact privacy@wrenchable.io and we will remove the account.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to the address on your account at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact