Privacy Policy

Two groups: the mechanic (our paying or trialing customer) and the mechanic’s own end customers (the vehicle owners whose details a mechanic enters). The mechanic is the data controller for their customer records; Curbwrench processes that data on their behalf.

• Account data — your name, email, shop name, region, and timezone when you sign up.
• Business data you enter — customers, vehicles, jobs, estimates, invoices, inspections, notes, and payment records.
• Payment connection data — if you connect Stripe, we store the Stripe account identifier. We never see or store full card numbers; card data goes directly to Stripe.
• Technical data — basic sign-in and activity timestamps used to keep the app secure and to know when an account is active.

• We do not sell your data, or your customers’ data, to anyone.
• We do not run third-party advertising trackers on the app or the customer portal.
• We do not market to your end customers.

We use a small set of trusted providers strictly to run the service:

• Supabase — database, authentication, and file storage (encrypted at rest and in transit).
• Stripe — payment processing, if you enable it. Stripe is the merchant processor; card data never touches our servers.
• Deepgram — transcription, only for voice notes you choose to record.

Each shop’s data is isolated at the database level with row-level security, so one shop can never read another’s records. Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to the founder.

• Export — you can export your data at any time. Ask us and we’ll provide it; self-serve export is built into the app.
• Delete — cancel and request deletion and we will remove your shop’s data. Some records may be retained briefly where law requires (e.g. tax/payment records).
• Correct — you can edit any record directly in the app.

California (CCPA/CPRA) and Canadian (PIPEDA) residents have these rights regardless of where they live; we apply them to everyone.

We keep your data while your account is active. After cancellation we retain it for a short grace period so you can come back or export, then delete it.

If this policy changes materially, we’ll note it here and update the date above. Questions about your data? Email support@curbwrench.com.