Service WrenchService Wrench
Get started

Legal

Privacy Policy

This Privacy Policy explains how Service Wrench, LLC (“Service Wrench,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with our websites, applications, and shop-management platform.

Effective / last updated September 21, 2026

Service Wrench provides cloud software that helps automotive repair businesses manage repair orders, estimates, inspections, invoicing, parts, scheduling, and related operations (the “Services”), including the website at servicewrench.net and the authenticated shop portal. This Policy forms part of our relationship with you together with our User Agreement. It is not legal advice. If you do not agree with this Policy, please do not use the Services.

1. Scope and roles

Shop customers and job data. When a repair shop (a “Customer”) uses Service Wrench to store information about its own clients, vehicles, jobs, invoices, and payments, Service Wrench generally acts as a service provider / processor on behalf of that Customer. The shop is the business that decides why and how that end-customer data is processed. End customers of a shop should contact the shop first for access, correction, or deletion requests related to shop records.

Account, billing, marketing, and site visitors. For information we collect to operate our own business relationship with shop owners, staff, prospects, and website visitors, we generally act as a business / controller.

This Policy applies to:

  • Shop owners, managers, and staff with Service Wrench accounts;
  • Prospective customers who create free accounts, request demos, or contact us;
  • Visitors to our marketing site and related pages; and
  • Individuals whose information is entered into a shop’s account (processed on that shop’s instructions).

2. Information we collect

2.1 Information you provide

  • Account profile. Name, email address, phone number, password (stored as a one-way hash), company or shop name, role, avatar color, and similar profile fields.
  • Shop configuration. Business name, addresses, phone, email, website, branding (such as logos), labor and tax rates, templates, locations, and operational settings.
  • Shop operations data. Customers, vehicles, appointments, repair orders, estimates, inspections, labor and parts lines, invoices, payments recorded in the app, purchase orders, time clock entries, internal team chat, attachments, and related shop records.
  • Communications. Support chats, emails, demo or contact form submissions, and feedback you send us.
  • Billing. Subscription plan, billing interval, payment status, and identifiers from our payment processor. Card numbers are handled by Stripe; we do not store full payment card numbers on our servers.

2.2 Information from integrations

If a shop connects third-party services (for example PayPal for receiving customer payments, QuickBooks, or messaging providers), we receive credentials, account identifiers, and data necessary to operate that connection, subject to the shop’s authorization and the third party’s terms. For PayPal specifically, that may include the shop’s PayPal email, name, payer id, and tokens needed to keep the connection active. Customer payments directed to a shop’s PayPal account are between the shop, its customer, and PayPal — not payments to Service Wrench. See PayPal’s privacy materials at paypal.com/legalhub/privacy-full.

2.3 Information collected automatically

  • Device and browser type, operating system, language, and approximate location derived from IP address;
  • Pages viewed, referring URLs, timestamps, and basic usage analytics needed to operate and secure the Services;
  • Cookies, local storage, and similar technologies used for authentication, preferences, and security.

3. How we use information

We use personal information to:

  • Provide, maintain, personalize, and improve the Services;
  • Authenticate users, manage roles and permissions, and prevent unauthorized access;
  • Process subscription billing and send transactional notices (invoices, security alerts, product updates);
  • Enable integrations the shop chooses to connect;
  • Provide customer support and respond to inquiries;
  • Monitor for abuse, fraud, outages, and security incidents;
  • Comply with law, enforce our agreements, and protect our rights and users; and
  • With appropriate notice or consent where required, send product or marketing communications (you may opt out of marketing emails).

We do not sell personal information as that term is commonly understood under U.S. state privacy laws, and we do not share personal information for cross-context behavioral advertising.

4. Legal bases (where applicable)

If you are in a jurisdiction that requires a legal basis for processing (for example the EEA/UK), we rely on: performance of a contract; legitimate interests in operating a secure SaaS business (balanced against your rights); consent where we ask for it; and legal obligation where applicable.

5. How we share information

We may disclose personal information to:

  • The shop and its authorized users. Staff with access to a shop account can see that shop’s operational data according to role permissions. We do not expose one shop’s customer records to another shop.
  • Service providers / subprocessors. Vendors who help us host, store, authenticate, email, bill, monitor, or support the Services (including hosting on Vercel, database and authentication via Supabase, subscription payments via Stripe, email delivery providers, and PayPal when a shop connects PayPal). These parties may process data only as needed to perform services for us and under contractual confidentiality and security obligations.
  • Professional advisors and corporate transactions. Counsel, accountants, insurers, or parties involved in a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality.
  • Legal and safety. When we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Service Wrench, our users, or the public.

6. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encrypted transport (HTTPS), hashed passwords, access controls, and environment isolation for production systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for safeguarding your login credentials and for configuring staff access appropriately within your shop.

7. Retention

We retain account and shop data for as long as the account remains active and for a reasonable period afterward to comply with legal obligations, resolve disputes, enforce agreements, and maintain backups. Retention periods vary by data type and legal requirements. Shops may request account closure via Contact; we will delete or de-identify personal information when no longer needed, subject to legal holds and residual backup copies that are overwritten on a rolling schedule.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of certain personal information, to restrict or object to certain processing, and to lodge a complaint with a supervisory authority. Shop users can update many profile fields in My account and shop settings (where permitted by role). To exercise privacy rights regarding information we control, contact us as described below. We will verify requests as required by law. We will not discriminate against you for exercising privacy rights.

California (CCPA/CPRA) notice

California residents may request to know categories and specific pieces of personal information collected, request deletion or correction, and opt out of “sale” or “sharing” as defined by California law. As noted, we do not sell personal information or share it for cross-context behavioral advertising. Authorized agents may submit requests with proof of authority. Categories of information we collect align with those listed in Section 2 (identifiers, commercial information, internet activity, professional information, and inferences only as needed to operate the product).

9. International transfers

Service Wrench is operated from the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States and other countries that may have different data-protection laws. Where required, we use appropriate transfer mechanisms with our providers.

10. Children

The Services are intended for business use by adults. We do not knowingly collect personal information from children under 16 (or under 13 where that standard applies). If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

11. Cookies and similar technologies

We use essential cookies and similar storage to keep you signed in, remember preferences, and protect the Services. Disabling cookies may prevent login or other core features from working. We do not use third-party advertising cookies to track you across unrelated sites for ad targeting.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective / last updated” date at the top will change when we do. Material changes will be posted on this page and, where appropriate, communicated through the Services or by email. Continued use of the Services after an update constitutes acceptance of the revised Policy to the extent permitted by law.

13. Contact

For privacy questions or requests, contact Service Wrench at servicewrench.net/contact. Please include enough detail for us to verify and respond to your request.

Also see our Privacy Policy and User Agreement. Questions? Contact us.