Privacy Policy

Effective date: 1 September 2026  ·  Last updated: 1 September 2026

Workshop Wrench (“we”, “us”, “our”) is committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what personal information we collect, how we use it, and your rights.

1. Information we collect

1.1 Shop operator data

When a workshop subscribes to Workshop Wrench we collect:

• Business name, ABN, and workshop address
• Billing contact name and email address
• Payment method details (stored by Stripe — we never hold raw card numbers)
• Staff accounts: name, work email, role, and hashed password

1.2 Customer data processed on your behalf

Workshop operators enter their own customers' data into the platform. As a data processor, we handle this data only on the operator's instruction. Typical fields include:

• Customer name, phone number, and email address
• Vehicle details: make, model, year, registration plate, and VIN
• Service history: repair orders, inspection findings, and invoices
• Communications: SMS and email messages sent on the operator's behalf

1.3 Marketing site

• Demo / contact form: name, work email, shop name, role, and optional free-text. Used to issue demo access and at most one follow-up communication.
• Optional analytics: aggregated page views and CTA events — only when you accept the analytics banner. We scrub passwords, tokens, and email fields.
• Essential operation: hosting, CDN, and security logs.

2. How we use your information

• Providing and operating the Workshop Wrench platform
• Processing payments and issuing invoices
• Sending transactional emails (account confirmations, password resets, billing)
• Delivering SMS and email notifications to your customers on your instruction
• Improving our product via aggregated, anonymised usage analytics
• Complying with legal obligations including ATO record-keeping requirements
• Responding to support queries and privacy requests

We do not sell personal information. We do not use customer data entered by your shop for any purpose other than providing the service you have subscribed to.

3. Third-party services (sub-processors)

4. Data location and security

All Workshop Wrench application data is stored in AWS ap-southeast-2 (Sydney, Australia). We apply:

• Encryption at rest (AES-256) for all database and file storage
• Encryption in transit (TLS 1.2 or higher) for all API and web traffic
• Tenant-scoped access control — one business cannot access another's data
• Role-based access within a business (OWNER, GM, Technician, etc.)
• Automated nightly database backups with 90-day retention
• Staff access audited via an immutable audit log

5. Your rights under the Privacy Act

Under the Australian Privacy Principles you have the right to:

• Access the personal information we hold about you (APP 12). Shop operators can request a full data export via Settings → Data & Privacy. End customers should contact the workshop directly or email us.
• Correct inaccurate personal information (APP 13). Update your details in the app or contact us.
• Deletion / anonymisation of personal data. Financial records (repair orders, invoices) are retained for 7 years under ATO obligations; all other PII can be anonymised on request.
• Data portability — export all data in JSON or CSV format at any time.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe your privacy rights have been breached.

6. Data retention

• Financial records (repair orders, invoices): retained for 7 years as required by the Australian Taxation Office (ATO).
• Customer profiles and vehicle records: retained for the lifetime of your Workshop Wrench subscription. Anonymisable on request.
• Marketing site contact form submissions: deleted after 90 days unless you become a subscriber.
• Export files: automatically deleted 24 hours after generation.

7. Cookies and tracking

The marketing site uses an analytics banner before setting any non-essential cookies. The Workshop Wrench application uses an HttpOnly session cookie for authentication only — no third-party advertising cookies are set. You can disable cookies in your browser, but some product features require the session cookie to function.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email to the account owner at least 14 days before they take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

9. Contact us

For privacy questions, access requests, or complaints:

• Email: [email protected]
• Post: Privacy Officer, Workshop Wrench, Australia

We will respond to privacy requests within 30 days as required by the Australian Privacy Act 1988.