Privacy Policy

1. Scope and roles

This Privacy Policy explains how Mobile Mechanic AI handles information when shop owners, employees, technicians, customers, and other users interact with the platform. A repair business generally decides what customer and vehicle information it enters or collects through its intake link. For that shop-controlled information, the shop is responsible for its own notices, permissions, recordkeeping, and legal obligations.

2. Information we collect

• Account and business information: names, email addresses, phone numbers, business/shop name, service area, branding, staff roles, account settings, and subscription information.
• Customer and vehicle information: customer contact details, addresses or service locations, VINs, license plates, mileage, vehicle details, complaints, requested services, availability, job history, findings, codes, estimates, approvals, invoices, warranties, and related records.
• Photos, files, voice, and notes: photos, receipts, documents, scan-tool reports, technician notes, and text produced from voice dictation when a user chooses those features.
• Location information: service addresses, manually entered locations, or device location when a user grants location permission.
• Payment and billing information: subscription status, transaction identifiers, and billing metadata. Payment-card details are intended to be handled by connected payment providers rather than stored directly by Mobile Mechanic AI.
• Integration information: connection status, account identifiers, tokens or authorization records required to use services a shop chooses to connect, such as calendars, accounting, file storage, payments, messaging, or other business tools.
• Technical and usage information: device/browser information, timestamps, feature usage, security events, error logs, and similar information used to operate and protect the service.

3. How information is collected

Information may come directly from a shop or customer, from a shop-specific intake form, from a technician or staff member, from device permissions the user grants, or from third-party services the shop intentionally connects.

4. How we use information

We use information to provide shop workspaces and customer intake; create and manage jobs, estimates, approvals, invoices, schedules, records, and reports; authenticate users and enforce shop separation; operate requested integrations; provide diagnostic and AI-assisted tools; prevent fraud and abuse; troubleshoot errors; provide support; maintain backups and reliability; comply with legal obligations; and improve the service.

5. How information is shared

Information may be shared with authorized users of the relevant shop; service providers that host, secure, process, deliver, or support the platform; and third-party services a shop deliberately connects or invokes. Examples may include Supabase, Stripe, email/SMS providers, Google or Microsoft services, accounting providers, mapping services, vehicle-data providers, parts suppliers, CARFAX if an authorized connection is later enabled, and AI providers when an AI feature is used.

We may also disclose information when reasonably necessary to comply with law, protect users or the platform, investigate abuse or security incidents, or complete a business transfer subject to appropriate protections. We do not sell personal information for money or use customer repair records for cross-context behavioral advertising.

6. AI-assisted features

When a user invokes an AI-assisted feature, relevant prompts and job context may be sent to the configured AI provider to generate the requested output. Users should avoid placing unnecessary sensitive information in prompts. AI output is assistive and must be reviewed by the professional using it.

7. Retention

We retain information for as long as reasonably necessary to provide the service, maintain business and security records, satisfy legal obligations, resolve disputes, and enforce agreements. Shops may have independent legal duties to retain repair, tax, warranty, authorization, or customer records. Deletion from active systems may not immediately remove information from encrypted backups or records that must be retained for legal or security reasons.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated accounts, tenant isolation, access controls, and secured service integrations. No online system can guarantee absolute security, and users remain responsible for protecting their credentials and controlling staff access.

9. Your choices and rights

Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, portability, or information about certain processing. Shop account holders can manage much of their business information directly and may export records where export tools are available. A customer whose information was supplied by a repair shop should normally contact that shop first because the shop controls the underlying repair relationship and record.

10. Device permissions

Microphone, camera, file, notification, and precise-location permissions are requested only when a feature needs them. Users can deny or later change those permissions through their browser or device settings, although the related feature may then be unavailable.

11. Children

Mobile Mechanic AI is a business service and is not directed to children under 13. Shop account users must be legally able to enter the applicable business agreements.

12. Changes to this policy

We may update this Privacy Policy as the platform, providers, or legal requirements change. Material changes may require renewed acknowledgement. The version and effective date appear at the top of this page.

13. Contact

Privacy questions can be sent to support@mobile-mechanic.app.