1. Who we are
This Privacy Policy explains how SFBV LLC, doing business as WrenchDock ("WrenchDock," "we," "us," or "our"), collects, uses, and protects information when you use our website and related services (the "Platform"). Please read it together with our Terms of Service.
2. Information we collect
From Customers (no account required)
When you submit an inquiry through the Platform, we collect:
- Your name (if provided)
- Your phone number and/or email address
- Your message and project details
- Which Vendor or Vendors you selected to contact
If you submit a review, we collect your rating, an optional name, and an optional written comment, linked to the inquiry tracking ID that made the review eligible.
We do not require Customers to create an account, and we do not keep a Customer profile beyond what is tied to a specific inquiry.
From Vendors (account required)
When you create and maintain a Vendor account, we collect:
- Your account email and password (the password is stored only as a secure hash, never in plain text)
- Business information: company name, description, trades, service areas, years of experience, phone number, website, and social media links
- Profile photos and gallery images you upload
- Billing information: payment card details are collected and stored directly by Stripe, our payment processor. WrenchDock does not store full card numbers. We keep your Stripe customer and subscription identifiers and your subscription status.
Collected automatically
- Standard technical data, such as IP address, browser type, and general request information, through normal web server and hosting logs.
- Bot protection: we use Cloudflare Turnstile on inquiry and review forms to tell people from automated programs. Turnstile may process technical and device signals as part of its own operation; see Cloudflare's privacy policy for details.
- Embedded Instagram posts: if a Vendor has added an Instagram post to their profile, viewing that profile loads Instagram's embed from Meta. Meta may receive your IP address and technical information and may set its own cookies, under Meta's own privacy terms.
3. Cookies
The Platform currently uses only the following:
- Strictly necessary: used to keep Vendors signed in and to remember basic preferences such as language and light or dark theme. The Platform cannot work properly without these.
- Security: Cloudflare Turnstile may use cookies or similar technology to tell legitimate visitors from bots on our forms.
- Third-party embeds: Instagram embeds, described above, may set their own cookies on pages where an embed appears.
We do not currently use analytics or advertising cookies. If we add analytics in the future, we will update this Policy before we do.
You can control cookies through your browser settings, though blocking strictly necessary cookies may stop parts of the Platform, such as staying signed in, from working.
4. How we use information
We use the information described above to:
- Connect Customers with Vendors by delivering inquiries to the Vendors they selected and sending confirmation details to Customers.
- Operate Vendor accounts, including publishing approved listings and managing subscription billing.
- Send transactional emails: inquiry notifications, account verification, password reset, and subscription or billing notices.
- Maintain the integrity of the Platform: rate limiting, bot and spam prevention, and reviewing reported abuse.
- Maintain and improve the Platform.
We do not sell personal information to third parties.
5. How information is shared
- Between Customers and Vendors: when a Customer submits an inquiry, their contact information and message are shared with each Vendor they selected. This is the core function of the Platform.
- Service providers who process data on our behalf, currently:
- Stripe: payment processing and subscription billing for Vendors
- Resend: transactional email delivery
- Cloudflare: domain and network services, and bot protection (Turnstile) on forms
- UploadThing: image uploads and storage for Vendor profile photos and galleries
- DigitalOcean: application hosting and managed database hosting
- Legal disclosure: we may disclose information if required by law or legal process, or to protect the rights, property, or safety of WrenchDock, our users, or the public.
- Business transfers: if WrenchDock is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.
We do not share Customer or Vendor information with third parties for their own independent marketing purposes.
6. Data retention
- Customer inquiries and reviews are kept until you ask us to delete them or until we delete them as part of maintaining the Platform. We do not currently delete them automatically on a schedule. To request deletion, contact us using the address in Section 11.
- Verification, sign-in session, and password-reset records expire and are removed automatically after a short period.
- Vendor account data is kept while the account is active and for a reasonable period after closure where needed for legal, tax, or dispute-resolution purposes.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you, or to opt out of certain processing. To make a request, contact us using the address in Section 11. We will respond within a reasonable time.
8. Children's privacy
The Platform is not directed at, and we do not knowingly collect personal information from, anyone under 18. If we learn we have collected information from a minor, we will take steps to delete it.
9. Security
We use reasonable administrative, technical, and physical safeguards, including password hashing, rate limiting on public forms, and reliance on established providers such as Stripe for sensitive processing rather than handling that data ourselves. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Where the Platform is intended for use
The Platform is intended for use in the United States. The interface is available in English, Spanish, Russian, and Portuguese for convenience; this does not mean it is directed at users in the European Union or United Kingdom.
11. Changes to this Policy
We may update this Policy from time to time. We will post the updated version on this page with a new "Last updated" date, and notify Vendors by email of material changes.
12. Contact
Questions or requests about this Privacy Policy can be sent to [email protected].