Privacy policy

WrenchOps is shop-service software made by Brobata LLC (“we”). This policy covers the website at wrench-ops.com and the WrenchOps apps for iPhone and Android. It says what we collect, why, who helps us run the service, and what you can do about it.

Who is responsible for what

A service company (“your company”) signs up and adds its people, customers and equipment. For that business information, your company decides what goes in and we store and process it on its behalf. For your own login, we are responsible.

What we collect

• Your account: name, email address, phone number if you add one, your role, and a password (stored only as a secure hash). If you sign in with Apple or Google instead, we receive your name and email address from them, and no password.
• Work records your company enters: customers and their contacts, sites and addresses, equipment, work orders, inspections, notes, quotes, invoices, time off and schedules.
• Photos and files you attach to a job, such as equipment photos, data plates and inspection evidence.
• Usage records the service needs to work: when you last signed in, an activity log of changes (who changed what, and when), and in-app notifications.
• A push token for each phone where you allow notifications — an address Apple or Google gives the app so we can send notifications to that phone. It is removed when you sign out on that phone or turn notifications off.

We do not collect your location from your phone, we do not use advertising identifiers, and we do not track you across other apps or websites.

How we use it

Only to run WrenchOps: to sign you in, show your company its work, send the emails the app sends (invites, password resets, quotes and invoices to your customers), and keep the service secure. We do not currently sell personal information or use it for advertising.

Who helps us run the service

These providers process data for us, under their own security and privacy terms:

• Supabase — database, sign-in and file storage.
• Vercel — hosts the website and app servers.
• Resend — delivers the emails the app sends.
• Apple — Sign in with Apple, if you choose it, and delivering notifications to iPhones (Apple Push Notification service).
• Google — Sign in with Google, if you choose it, and delivering notifications to Android phones (Firebase Cloud Messaging).
• Stripe — takes card payments when your customers pay an invoice online. Card numbers go to Stripe, never to us.
• Intuit QuickBooks — only if your company connects it, to send invoices and customers to your QuickBooks.
• OpenStreetMap (Nominatim and map tiles) — turns a site’s street address into a map pin, and draws the maps.

We do not share personal information with anyone else except where the law requires it.

How long we keep it

Work records stay as long as your company uses WrenchOps, because they are its business records (inspection certificates, invoices and job history). When you delete your account, your login and personal details are removed as described on the delete your account page. When a company closes its account, its records are erased within 30 days unless the law requires us to keep them longer.

Security

Everything is encrypted in transit (HTTPS). Each company’s records are walled off from every other company’s at the database level, and people inside a company see only what their role allows.

Your choices

• See and correct your details from inside the app, or ask your company’s owner.
• Delete your account at any time: in the app under Your account, or see delete your account.
• Ask us for a copy of your personal information, or anything else about this policy, at [email protected].

Children

WrenchOps is a workplace tool for adults. It is not meant for anyone under 18.

Changes

If we change this policy in a way that matters, we will post the new version here and tell account owners by email at least 14 days before it takes effect.