Last updated: April 17, 2026
We collect information you provide when creating an account (name, email, company name, trade type), data you enter while using the platform (jobs, invoices, bills, customer records), and standard usage data (IP address, browser type, pages visited).
Your data is used to provide and improve the WrenchToCash service, process payments, send transactional emails (invoices, password resets), and provide customer support. We do not sell your data to third parties.
To operate the service, we share specific data with the following subprocessors. Each only receives the data required to perform its function and is bound by its own privacy and data-processing commitments.
| Subprocessor | Purpose | Data shared |
|---|---|---|
| Supabase | Database + auth + storage | All platform data |
| Vercel | Application hosting | Request logs, IP addresses |
| Stripe | Subscription + invoice payments | Payment details (card data never hits our servers) |
| Resend | Transactional email delivery | Recipient email, message content |
| Twilio | SMS notifications + payment links | Recipient phone number, message content |
| Vapi | AI phone receptionist | Inbound call audio, transcript, caller phone number |
| Anthropic | AI bill extraction + assistant reasoning | Uploaded bill images, relevant job context |
| Mapbox | Map tiles, address autocomplete, and geocoding on the route view | Partial and complete street address text typed by the contractor is sent to Mapbox for autocomplete and geocoding (including in-progress fragments during customer, vendor, company onboarding, and company settings address entry). Mapbox processes this data on US-based infrastructure and retains query logs per its ToS. Customer names, emails, and phone numbers are never sent. |
| Sentry | Error monitoring | Stack traces, request metadata (no sensitive body content) |
| QuickBooks Online | Accounting sync (opt-in per company) | Customer records, invoices, payments when connected |
We do not sell your data to any third party. If you need to restrict a specific subprocessor (e.g., disable the map view for privacy-sensitive customers), contact privacy@wrenchtocash.com.
All data is stored in encrypted databases with row-level security. We use industry-standard TLS encryption for data in transit. Payment processing is handled by Stripe and we never store card numbers on our servers.
Your data is retained for as long as your account is active. Upon account deletion, we remove all personal data within 30 days. Anonymized usage analytics may be retained indefinitely.
You may request access to, correction of, or deletion of your personal data at any time by contacting us at privacy@wrenchtocash.com.
For privacy-related questions, email privacy@wrenchtocash.com.