Draft, to be reviewed

Privacy Policy

This is a draft that has not been reviewed by a lawyer. DRAFT, last edited October 2026.

Who we are

In this policy, "we" and "us" means FrontWrench. You can contact us through the Help page in your account.

What we collect

Account data (name, email, hashed password), business settings (trade, services, prices, hours, service area, technicians), and data you and your customers create in the service: chat conversations, leads (name, phone, address, issue), jobs, quotes/invoices and support tickets. We also keep basic technical logs (IP address, request times, errors) for security.

Payments

Online payments are not enabled yet; paid plans and payment options will appear here once available. When you subscribe, our payment processor collects your payment details and billing information directly; we never see or store your full card details. We receive your subscription status, plan, customer ID and limited billing details. The processor's handling of your data is covered by its own privacy policy, linked at checkout.

How we use data

To provide the service (answering your customers, booking, invoicing, dashboards), to provide support, to keep the service secure and prevent abuse, and to bill your subscription through {PAYP}. Conversation text is sent to an AI model provider (currently Google Gemini) to generate replies.

Processors

Hosting provider, AI model provider (Google), and our payment processor (payments). We don't sell personal data.

Your customers' data

For data about your own customers (leads, chats, jobs) you are the controller and we process it on your behalf.

Retention

Account data is kept while your account exists. If your trial or subscription ends we keep your data (so you can resume) until you ask us to delete it; deletion requests are handled within 30 days. Logs are kept up to 90 days.

Your rights

You can request access, correction, export or deletion of your data by contacting us through the Help page in your account. Depending on where you live (for example GDPR or US state laws) you may have additional rights.

Security

Passwords are hashed with bcrypt, sessions use secure HTTP-only cookies, and each business's data is isolated.

Changes

We'll post updates here and notify account owners of material changes.