Privacy Policy

Wrench ("we," "us," or "our") operates the maintenance management software available at onwrench.com. This Privacy Policy explains what data we collect, how we use it, and what choices you have.

1. Data We Collect

Account Information

When you sign up, we collect your email address, name, and organization name. This is used to create your account and identify you within your team.

Maintenance Data

Data you enter into Wrench includes equipment records, work orders, PM schedules, parts inventory, maintenance logs, meter readings, and checklists. This data belongs to your organization and is used solely to provide the service.

Usage Data

We collect basic server logs (IP address, browser type, pages visited, timestamps) to keep the service running and diagnose issues. We do not use third-party analytics services or advertising trackers.

2. How We Use Your Data

• To provide and operate the Wrench service
• To send transactional emails (account verification, password resets, work order notifications)
• To respond to support requests
• To monitor service health and fix bugs
• To enforce our Terms of Service

We do not sell your data. We do not use your maintenance data for advertising. We do not share your data with third parties for their marketing purposes.

3. Data Storage and Security

Your data is stored in Supabase, which runs on Amazon Web Services (AWS) infrastructure in the United States. Data is encrypted in transit (TLS) and at rest. We use row-level security policies to ensure tenants can only access their own data.

No system is 100% secure. We take reasonable measures to protect your data, but we cannot guarantee absolute security.

4. Offline Data (PWA)

Wrench functions as a Progressive Web App (PWA) with offline capabilities. When you use Wrench offline, data is temporarily stored in your browser's IndexedDB on your device. This data syncs to our servers when your device reconnects to the internet. Clearing your browser data will remove the local offline cache.

5. Cookies

We use essential cookies and local storage to maintain your login session and store application preferences. We do not use tracking cookies, third-party analytics cookies, or advertising cookies.

6. Third-Party Services

We use the following third-party services to operate Wrench:

• Supabase — database, authentication, and file storage (hosted on AWS, US regions)
• Vercel — application hosting and deployment
• Stripe — payment processing (if and when billing is enabled for your account). Stripe handles payment card data directly; we do not store your card numbers.

Each of these services has its own privacy policy. We encourage you to review them.

7. Your Rights

You can:

• Access your data — view and export your maintenance data at any time through the application
• Correct your data — update your account information and maintenance records within the app
• Request data export — contact us for a full export of your organization's data
• Request data deletion — contact us to delete your account and associated data. We will process deletion requests within 30 days. Some data may be retained as required by law or for legitimate business purposes (e.g., billing records).

To exercise any of these rights, email us at support@onwrench.com.

8. Data Retention

We retain your data for as long as your account is active. If you cancel your account, we will delete your organization's data within 30 days, except where retention is required by law. Server logs are retained for up to 90 days.

9. Children's Privacy

Wrench is a business application. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. GDPR and CCPA

If you are located in the European Economic Area (EEA), the UK, or California, you have additional rights under the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), respectively. These include:

• The right to know what personal data we collect and why
• The right to access, correct, or delete your personal data
• The right to data portability (receive your data in a structured format)
• The right to opt out of the sale of personal data (we do not sell personal data)
• The right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at support@onwrench.com. We will respond to verified requests within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the application. Your continued use of Wrench after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:

support@onwrench.com