PRIVACY POLICY

National Wrench Index (“we,” “us,” or “our”) operates the National Wrench Index Suite™ platform. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you have questions, contact us at edwardfleeman57@gmail.com.

Account & Business Information

When you register for the Service, we collect your name, email address, password (hashed), business name, profession type, service area, and any other profile information you provide.

Customer & Vehicle Records

As a Subscriber, you may upload or create records for your customers, including their names, phone numbers, email addresses, vehicle information, and service history. This data belongs to you; we process it solely to deliver the Service on your behalf.

Payment Information

Billing is handled by Stripe. We do not store your full credit card number, CVC, or other sensitive payment details on our servers. Stripe may collect and store payment information in accordance with their own privacy policy.

Usage Data

We may collect information about how you interact with the Service, including pages visited, features used, and actions taken, to improve the platform and diagnose technical issues.

We use the information we collect to:

• Create and manage your account and deliver the features of the Service
• Process subscription payments and manage billing
• Send transactional SMS and email notifications to you and your customers on your behalf
• Generate AI-assisted quotes and repair specifications via the QuickWrench™ feature
• Provide customer support and respond to your inquiries
• Monitor and improve the performance, security, and reliability of the Service
• Comply with applicable legal obligations

We do not sell your personal information or your customers' personal information to third parties.

We share data only with the following trusted service providers, and only to the extent necessary to deliver the Service:

• Stripe — payment processing and subscription billing
• Twilio — SMS delivery for appointment confirmations, reminders, and other transactional notifications
• Supabase — database hosting and authentication infrastructure
• Anthropic — AI inference for QuickWrench™ VIN-to-quote and repair specification features

We do not share your data with any other third parties. We do not sell, rent, or trade personal information to data brokers, advertisers, or any other entities.

We retain your account data, customer records, and business information for as long as your account remains active. If you cancel your subscription, your data will be retained for 30 days following account closure to allow for potential reactivation or data export. After 30 days, all data associated with your account will be permanently deleted from our systems.

Some information may be retained for longer periods where required by law (for example, financial records).

We take the security of your data seriously. Our security practices include:

• Encrypted data storage and transmission (TLS/HTTPS on all connections)
• Row Level Security (RLS) enforced at the database level — each Subscriber's data is logically isolated from other Subscribers
• Secure authentication via Supabase, with hashed passwords and session management
• Access controls that limit which team members can access production data

No security system is impenetrable. While we follow industry-standard practices, we cannot guarantee absolute security. In the event of a data breach that affects your information, we will notify you as required by applicable law.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of any inaccurate or incomplete data
• Deletion — request deletion of your personal data, subject to legal retention requirements
• Portability — request an export of your data in a machine-readable format

To exercise any of these rights, contact us at edwardfleeman57@gmail.com. We will respond to verified requests within 30 days.

The Service uses session cookies to maintain your authenticated session while you are logged in. These cookies are strictly necessary for the Service to function and are deleted when you end your browser session or sign out.

We do not use tracking cookies, advertising cookies, or any third-party cookies for analytics or behavioral profiling.

Phone numbers collected through the Service — whether from Subscribers during registration or from their customers during the booking process — are used solely for transactional communications directly related to the Service.

Specifically:

• Subscriber phone numbers may be used to send account-related notifications
• Customer phone numbers entered by Subscribers or collected via booking forms are used only to send appointment-related SMS messages on behalf of the Subscriber
• Phone numbers are never sold to third parties
• Phone numbers are never used for marketing without explicit, affirmative opt-in consent
• All SMS messages include a STOP opt-out instruction; any opt-out is respected immediately

The Service is intended for use by adults operating professional businesses. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will promptly delete that information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

For privacy-related questions, requests, or concerns, please contact us at: edwardfleeman57@gmail.com