Wrench’d Auto Inc. (“Wrench’d”, “we”, “us”) operates wrenchd.ca, app.wrenchd.ca and the Wrench’d mobile apps (together, the “Service”). This Privacy Policy explains what personal information we collect, why, how we protect it, and the choices you have. It applies to visitors of our website, to the shops that subscribe to Wrench’d and their staff, and to the customers of those shops whose information is processed through the Service.
We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA), and Canada’s Anti-Spam Legislation (CASL).
1. Two roles: our own users, and our customers’ customers
When a shop subscribes to Wrench’d, we collect information about that business and its staff directly, and we are the organization responsible for it.
When a shop enters its own customers’ details into Wrench’d (names, phone numbers, vehicles, invoices, appointments), the shop is responsible for that information and decides how it is used. We process it only on the shop’s instructions to provide the Service. If you are a customer of a shop that uses Wrench’d and have questions about your information, please contact that shop first; we will help them respond.
2. What we collect
- Account and business information — shop name, address, contact details, staff names, work emails and mobile numbers, roles and permissions, and payroll-related details a shop chooses to record for its own employees.
- Shop records — customers, vehicles, estimates, invoices, inspections, photos and videos, bookings, messages sent to customers, parts and tire inventory, and time-clock entries, as entered by the shop.
- Payment information — subscription billing is handled by our payment processor. We do not store full card numbers on our systems.
- Technical information — device type, browser, IP address, sign-in times, and logs generated by using the Service, used for security and troubleshooting.
- Website analytics — basic, aggregated visit statistics on wrenchd.ca. We do not place advertising pixels inside the signed-in application.
3. How we use it
- To provide, secure, support and improve the Service.
- To send the messages a shop asks us to send on its behalf — appointment confirmations and reminders, estimates, invoices, inspection reports and review requests — by email or text.
- To send sign-in codes and security notices to staff.
- To bill for subscriptions and respond to support requests.
- To comply with the law and enforce our agreements.
We do not sell personal information, and we do not use shop or customer data for advertising.
4. Text messages and email (CASL)
Messages sent through Wrench’d to a shop’s customers are sent at that shop’s direction, based on the consent the shop has obtained. Every text includes a way to identify the sender, and recipients can opt out at any time by replying STOP or contacting the shop. Mobile numbers and opt-in records are never shared with third parties for their own marketing.
5. Google user data (Google Business Profile connection)
A shop may choose to connect its Google Business Profile to Wrench’d so it can read its Google reviews inside the Service and post replies. When a shop does this:
- Access is granted through Google’s own sign-in screen. Wrench’d never sees or stores the shop’s Google password.
- We receive an access credential and the Google account’s email address, and we read the reviews and listing details for the location the shop selects. The credential is stored encrypted.
- We use this data only to display reviews to the shop’s authorized staff and to publish the replies they write. We do not use it for advertising, we do not sell it, and we do not share it with anyone other than the shop it belongs to and the service providers that host the Service for us.
- The shop can disconnect at any time from Settings › Connections › Google, or by removing Wrench’d in its Google Account permissions. Disconnecting deletes the stored credential.
Wrench’d’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Who we share it with
We share personal information only with the service providers that help us run Wrench’d — cloud hosting and database, file storage, email and text-message delivery, payment processing, mapping, and the optional integrations a shop turns on (for example parts suppliers, vehicle data or accounting). These providers may only use the information to provide their service to us. Some are located outside Canada, including in the United States, and information may be stored or processed there and be subject to the laws of those jurisdictions.
We may also disclose information when required by law, to protect our rights or safety, or in connection with a sale or merger of our business (in which case the new owner is bound by this policy).
7. How we protect it
We use encryption in transit and at rest, role-based access controls inside every shop’s account, isolation between shops, audit logs, and regular backups. Access by our staff is limited to what is needed to support the Service. No system is perfectly secure; if we learn of a breach that creates a real risk of significant harm, we will notify affected organizations and the appropriate privacy authorities as the law requires.
8. How long we keep it
We keep shop records for as long as the shop’s subscription is active, then for a limited period so the shop can export its data, after which it is deleted from active systems (backups roll off on their own cycle). Some records — invoices, for example — may be retained longer where tax or other laws require it.
9. Your rights and choices
You may ask to see the personal information we hold about you, ask us to correct it, or withdraw consent (subject to legal or contractual limits). Shops can export and delete their own records from within the Service or by contacting us. If you are a customer of a shop that uses Wrench’d, please direct your request to that shop; we will help them fulfil it.
If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.
10. Children
The Service is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18 except as part of a shop’s customer records under the shop’s control.
11. Changes
We may update this policy from time to time. The date at the top shows the latest revision. Material changes will be announced in the Service or by email to account administrators.
12. Contact
Privacy questions or requests: support@wrenchd.ca
Wrench’d Auto Inc.
12840 St. Albert Trail NW, Edmonton, AB T5L 4H6, Canada