Security

Trust has to be built into the workflow.

Curbwrench handles customer PII, job history, invoices, and payments. The product is designed around isolation, provider-signed webhooks, and straightforward export paths.

Per-shop data boundaries

Every business table is scoped by shop ID and protected by Supabase Row Level Security.

Stripe Connect

Your customers pay the mechanic. Curbwrench never touches raw card numbers and stays on the SAQ-A path.

Data export

Customers, vehicles, jobs, estimates, invoices, and payments can be exported. No hostage data.

Webhook signing

Stripe and other provider webhooks are verified before state changes are accepted.

Backups and recovery

Supabase Cloud provides managed database durability while the product is still early.

Privacy posture

Only collect data needed to run the shop workflow, customer portal, email, and payments.