Privacy

Privacy Policy

This policy explains, in plain language, what information WrenchPath collects, why we collect it, and when it is shared. WrenchPath is currently in private beta.

Draft notice

This document is a beta-stage draft written to describe how the service actually behaves today. It is not legal advice and has not been reviewed by a lawyer. It should receive professional legal review before any full commercial launch.

Information you give us

  • Vehicle information — year, make, model, optional trim, and mileage.
  • Assessment information — your description of the problem, symptom selections, warning lights, dashboard messages, any diagnostic trouble codes you enter, recent repairs, maintenance and events, plus your answers to any follow-up questions.
  • Account data — if you create an account, your email address and the date the account was created. Passwords are handled by our authentication provider and are never visible to WrenchPath.
  • Mechanic request information — when you ask us to send your request to a repair shop, your name, email address, optional phone number, preferred contact method, city, province/state and postal code.
  • Coverage requests — if WrenchPath has no partner shop in your area, we record the area itself, and your email address only if you choose to leave one.

We do not ask for your VIN, licence plate, home address, date of birth, payment details or government identifiers, and you should not include them in free-text fields.

Why we collect it

Vehicle and symptom information is used to generate your preliminary assessment. Account data lets you save vehicles and revisit past assessments. Contact information exists for one purpose only: so a repair shop you asked us to contact can reach you. We also keep basic, non-identifying usage counts to protect the service from automated abuse.

When information is shared with mechanics

Nothing is sent to a repair shop unless you complete the “Find a mechanic” form and tick the consent box. We record the date and time of that consent.

When you do submit a request, matched shops first see only the vehicle details, the reported problem, the preliminary assessment and the general area (the first three characters of your postal code). Your name, email address, phone number and full postal code are released to a shop only after that shop explicitly accepts your request. Shops that do not accept never see your contact details. If no shop matches your area, no request record and no contact details are stored at all.

AI processing

Your vehicle and symptom information is sent to a third-party AI model provider through the Lovable AI Gateway to generate the assessment. Assessments are AI-generated preliminary information, not a professional diagnosis. Do not include personal information about yourself or others in the free-text fields — only describe the vehicle and what it is doing.

Service providers

WrenchPath relies on a small number of third-party providers:

  • Supabase — database, authentication and hosting of stored data.
  • Lovable — application hosting and the AI gateway used for assessments.
  • Google Fonts — web font delivery.

We do not sell your information, and we do not run advertising or tracking networks.

Cookies, local storage and session storage

WrenchPath does not use advertising or analytics cookies. We use browser storage for the service to function:

  • Local storage — keeps your signed-in session, and stores assessments and vehicles on your own device so the app works without an account.
  • Session storage — temporarily holds an assessment you have started but not finished, so a refresh does not lose your answers. It is cleared when the assessment completes or when you close the tab.

Clearing your browser storage removes this data from your device.

Data security

All traffic is served over HTTPS. Stored data is protected by row-level database policies so that an account can only read its own vehicles and assessments, and a repair shop can only read requests matched to that shop. Contact details live in a separate, restricted table that is unreadable until a shop accepts the request. Sensitive keys are held server-side only and are never sent to your browser. No system is perfectly secure, and WrenchPath is a beta service.

Retention, correction and deletion

You can edit or delete your saved vehicles and assessments at any time from My vehicles. Deleting your account removes your profile, vehicles and saved assessments. To request correction or deletion of any other information — including a mechanic request you have already submitted — contact us through the support page. Requests already accepted by a shop may have been copied by that shop, which is an independent business responsible for its own records.

Children

WrenchPath is not intended for use by anyone under 16.

Changes

During the beta this policy may change as the service develops. Material changes will be reflected on this page.

Privacy questions

Questions about this policy or about your information can be sent through the support page.