Privacy Policy

This policy covers crew members who sign in and clients who open a portal, payment, or agreement link. The App is a private shop system. The shop does not sell personal information, and it does not share it for cross-context behavioral advertising.

Crew accounts. Name, email, phone, role, pay rate, a password stored only as a hash, and whether the account can sign in. When the shop connects Square, a Square team-member id and timecard ids may be stored with the shifts that were sent. Time punches record who worked, on which build, and when.

Clients and jobs. Name, company, address, phone, email, preferred way to be reached, notes, vehicles, build scope, photos, documents, messages, selections, quotes, invoices, payments, and signed agreements. A private portal link lets the client open their job without creating a password.

Payments. Card payments are entered on Stripe. The App stores the amount, fee, method, a reference, and the date. It does not store the full card number or the card security code.

Mail and receipts. When the shop connects a mailbox, messages pulled into the inbox are stored so supplier and parts mail can be matched to a build. Receipt photos and files the crew adds are stored. When an OpenAI key is saved, a receipt image or a PDF without selectable text is sent to OpenAI so the vendor, date, and amounts can be read.

Accounting. When the shop connects QuickBooks, customer, invoice, payment, vendor, and account records sync between the App and that QuickBooks company.

Sign-in and the browser. A signed-in crew member has a session cookie that keeps the login. The App may store a light or dark appearance choice in the browser. It does not use advertising cookies or third-party analytics trackers.

The shop uses this information to:

• run builds and correspond with clients
• prepare quotes, invoices, agreements, and warranties
• take payment and keep the books
• clock crew time and, when connected, send shifts to Square
• file receipts and supplier mail with the job they belong to
• protect accounts, private links, and the App

The shop shares information with service providers only as needed to run the App:

• the host that serves the App and its database
• Stripe, for card payments
• QuickBooks, when the shop has connected a company
• Square, when the shop sends crew time
• Resend, for transactional email such as invoices and agreements, and for inbound receipt mail when that is turned on
• Google, when a Gmail mailbox is connected
• OpenAI, when a receipt image or a text-less PDF is sent to be read

The shop may also disclose information when the law requires it, to enforce an agreement, or to protect the shop, its crew, or its clients. A client sees their own job through their portal link. Crew members see the records their role allows.

The shop keeps job and account records while they are needed to do the work and to meet tax, warranty, and signed-agreement duties. Closing an account or finishing a build does not by itself erase those records. Passwords remain stored only as hashes. Card numbers are not stored in the App.

Crew access requires a password. Client access requires a private link. Integration secrets are encrypted before they are stored. No method of storage or transmission is perfectly secure. Treat a portal, payment, or signature link as private to that job.

You may ask the shop to access, correct, or delete personal information it holds about you. The shop will honor a deletion request except where it has to keep the record, including invoices, payments, tax records, and signed agreements. A crew member may ask the shop to close a login. A client may ask the shop to retire a portal link.

The App does not respond to a browser “Do Not Track” signal, because it does not track people across other websites.

The App is for the shop and its clients. It is not directed at children under 13, and the shop does not knowingly collect personal information from them.

The shop may update this policy by posting a new version on this page and changing the effective date. Continuing to use the App after that date means you accept the update.

Privacy questions and requests: