Privacy Policy

Who we are

Wrenchable Software LLC ("we," "us," "our") is a Florida limited liability company that operates the Wrenchable software-as-a-service platform for mobile RV repair technicians and small service shops. The Service provides customer relationship management, scheduling, estimating, invoicing, and integrated business communications. Throughout this policy, "you" refers to the business owner or technician who creates an account; your customers are referred to as "your customers."

What we collect

Information you provide

• Account information: name, email, business name, phone, mailing address
• Customer records you create: customer names, phone numbers, email addresses, mailing addresses, vehicle information, job history, notes
• Business content: estimates, invoices, photos attached to jobs, time entries, service notes
• Payment method information for subscription billing (processed by Stripe; we never see or store full card numbers)

Information generated through use

• Messages sent and received through the platform (SMS / voice call records / voicemails)
• Server logs (IP address, browser type, timestamps, page paths) used for security and debugging
• Aggregated usage metrics for product improvement

Information you connect from third parties (optional integrations)

• QuickBooks Online (via Intuit): if you enable the QBO integration, we read and write accounting records (invoices, expenses, chart-of-accounts entries) using OAuth tokens you grant.
• Email (via Google): if you enable the Gmail integration or sign in with Google, we read incoming business email and classify it using AI. We only access messages sent to addresses you explicitly authorize.
• Google Business Profile: if you connect your Google Business Profile, we read your listing's reviews, business information, and performance metrics, and — at your direction — post replies to reviews, publish updates to your listing, and edit your business information. We only ever act on the specific business locations you select when connecting, and we never act on a location without you asking us to.
• Google Ads: if you connect a Google Ads account, we read your campaign and performance data and, at your direction, create and manage campaigns for that account. Your advertising spend is billed by Google directly to you; Wrenchable never holds or bills your ad budget.
• Distributor accounts: if you connect Meyer, Keystone (NTP-STAG), Lippert, or similar wholesale parts accounts, we use the credentials you provide to fetch live pricing and place purchase orders on your behalf.
• Location (optional): if you enable mileage tracking, we use your device's GPS to record drive routes between jobs. You can disable this at any time in Settings.

How we use information

• To provide and maintain the service (display your data, transmit messages on your behalf, process subscription payments)
• To send you account notifications (sign-in alerts, billing receipts, service announcements)
• To enforce our Terms of Service and protect against fraud or abuse
• To improve product features through aggregated, de-identified analytics

Who we share information with

We share information with the following service providers, only as needed to deliver the service:

• Twilio Inc. — voice and SMS infrastructure
• Stripe, Inc. — payment processing for subscription billing and (where you have opted in) customer payment collection via Stripe Connect
• Supabase Inc. — database, file storage, and authentication infrastructure
• Vercel Inc. — application hosting and edge network
• Intuit Inc. — QuickBooks Online sync (only if you enable the integration)
• Google LLC — email integration, Sign-In with Google, Google Business Profile, and Google Ads (only if you enable)
• Anthropic, PBC — AI features powered by Claude, processed on your tenant's data only when you opt in
• OpenAI, OpCo, LLC — AI features for specific tasks (e.g., transcription), processed on your tenant's data only when you opt in
• Apple Inc. and Google LLC (APNs / FCM) — push notifications to the native mobile app, if installed

We do not use your data to train AI models that benefit other tenants or third parties. AI sub-processors (Anthropic, OpenAI) are contractually bound to not retain or train on inputs we send them.

We will disclose information when required by valid legal process (subpoena, court order, government request) or to investigate suspected fraud, abuse, or security incidents. We do not sell your information or your customers' information to data brokers, advertising networks, or any other third party.

Google user data and Limited Use

Wrenchable's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice that means the Google data you connect — Gmail messages, your Business Profile and its reviews, and your Google Ads campaigns — is used only to provide and improve the features you turned on inside your own workspace. Specifically, we do not:

• transfer that data to anyone except to provide the feature you enabled, to comply with law, or as part of a merger or acquisition with your notice;
• use it for advertising, or sell it to data brokers or advertising networks;
• let any human read it, except with your explicit consent, to resolve a support issue you raised, for security purposes, or where the law requires it;
• use it to train generalized AI models. AI features run per-tenant, on your data, only when you opt in.

You can disconnect any Google integration at any time from inside the app. Disconnecting deletes the stored OAuth tokens for that integration immediately, and we stop accessing your Google data at that moment.

Data retention

We retain account and customer data for as long as your account is active plus 90 days after cancellation, during which you can export or reactivate. After that we delete it, except for records we are legally required to retain (tax records: 7 years; payment-dispute records as required by Stripe). Communication records (messages, voicemails) are retained for up to 24 months by default, configurable in your account settings.

Your rights

You can:

• Access and download a copy of your data via Settings → Data → Export
• Correct or update account information directly in the app
• Delete your account at any time via Settings → Account → Close account
• Request specific data deletion or rights questions by email at privacy@wrenchable.io

California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to delete that information. Contact us at the email above to exercise these rights.

Security

We use industry-standard security practices:

• Encryption in transit: TLS 1.2+ on all connections
• Encryption at rest: AES-256 on the database, file storage, and backups. OAuth tokens (Gmail, QuickBooks) are additionally AES-256-GCM encrypted at the application layer before storage, so a database compromise alone would not yield usable tokens.
• Row-Level Security: Postgres enforces tenant isolation at the database level — your data is never queryable by another tenant.
• Multi-factor authentication: TOTP authenticator-app MFA is available for all user accounts and is required by policy for any account that connects a bank.
• Least-privilege admin access: our team uses scoped tokens for support and does not log into tenant accounts without consent.

No system is perfectly secure. If a breach affects your data we will notify you without undue delay, consistent with applicable law.

Cookies

We use functional cookies for authentication and to remember your preferences (theme, navigation state). We do not use advertising or cross-site tracking cookies.

Children

Wrenchable is intended for business use by adults. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact privacy@wrenchable.io and we will remove the account.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to the address on your account at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact