Privacy Policy

1. What we collect and why

• Inquiries: business contact details, messages and correspondence, to respond and arrange work.
• Shop records: authorized repair files, estimates, payment evidence and findings, to perform the agreed review. These may contain customer, vehicle and claim details.
• Payments: transaction details and limited payment-method information, for billing and refunds. Payment providers handle full payment credentials.
• Technical data: IP addresses, browser details, security logs and operational cookies processed by providers to run and protect their services.

For shop records, we follow the shop’s authorized instructions within the agreed service. We also use necessary information to handle requests, protect the service and meet legal obligations.

The inquiry form accepts no attachments. Use only the arranged private upload link. Remove unnecessary personal details; never send passwords, full card or bank details, government IDs or unrelated medical information.

2. What we do not do

We do not sell personal information or share it for targeted advertising. We do not send shop records to external AI services or use confidential records for model training, unrelated marketing or cross-shop benchmarking. We have added no advertising pixels or behavioral analytics.

3. Access, providers and security

Access is limited to authorized reviewers, your designated contacts and providers needed for the service, or disclosure required by law.

Cloudflare hosts the public website. Zoho handles inquiry forms and email; Bluevine and Stripe handle payments. Their linked policies describe their data practices. Before accepting shop records, we disclose the document providers, processing locations and backup retention.

We restrict access and minimize collection. No system is risk-free. We investigate security incidents, take protective action, and notify affected shops without unreasonable delay when their records are compromised, alongside legally required notices.

4. Retention and deletion

• Inquiries: reviewed for deletion after 12 months of inactivity; longer retention requires an ongoing business or legal need.
• Audit working records: originals and derived data removed from active systems 30 days after delivery or termination, unless a correction extension is agreed or a legal hold applies. Guest-upload originals have the shorter period shown before upload.
• Business records: limited agreements, consent, billing and security records retained as needed for legal, tax or dispute purposes.

Backups expire separately; payment providers retain their own records. Retained copies remain restricted. Keep your originals and save your deliverables; we are not your records archive.

5. Requests and changes

Email Bobby to request access, correction or deletion without attaching sensitive records. We may verify identity and coordinate with the shop. We explain legal or third-party limits; rights depend on applicable law.

Material changes receive advance notice and any legally required consent. An update does not itself authorize new uses of information already collected. See our Terms of Service for service and payment rules.