Privacy Policy

Effective [November 16, 2026] · Version 2.3

This policy explains what information RepairRide LLC, a California limited liability company (“RepairRide,” “we,” “us”) collects when you use repairride.com, the RepairRide iOS app, our launch waitlist page, and related services (together, the “Service”), how we use and share it, and the choices you have. It applies to customers, guests who book without an account, and visitors. Shop owners and their staff should also read the “Shop owners and staff” section. Our Terms of Service incorporate this policy.

Shops are independent businesses. When you book, we pass your booking information to the shop you chose. The shop is a separate business with its own privacy practices and its own records. This policy describes what we do; the “How we share information” section describes what shops receive.

Who we are and how to reach us

RepairRide LLC, a California limited liability company, 207 3rd Street, Apt 320, Davis, CA 95616. Privacy questions and requests: privacy@repairride.com.

Information you give us

• Account: your name, email address, and password (we never see your password in plain text; our authentication provider stores it in hashed form), and, if you turn on two-factor authentication, an authenticator-app enrollment. If you sign in with Google or Apple, we receive your name and email (Apple may provide a relay address) and an identifier from that provider.
• Phone number: optional for your account; required for text-message reminders; required to book as a guest. Shops can use it to call you about your repair.
• Vehicles, bikes and skis/snowboards (your Garage): year, make, model and, optionally, trim, engine, color, mileage, VIN, license plate, bike brand/model and frame serial number, ski or snowboard brand, model and length, and notes you type. VIN, plate and serial are optional. When you enter a VIN we send it to the U.S. National Highway Traffic Safety Administration’s public vPIC service to decode year, make, model and trim.
• Bookings: the shop, service, date and time, the vehicle you selected (a copy of its details is saved with the booking), what you tell the shop is wrong, photos you attach (mobile bookings require at least one), for services that ask, whether insurance is involved and the carrier and claim number you enter, and any cancellation reason or note.
• Guest bookings: if you book without an account we collect your name, email, phone and vehicle details (including VIN or plate if you enter them). To confirm the email is yours, we first email it a 6-digit code that works for 10 minutes; once you enter it, that browser can book with that email for 30 days without a new code. We send your confirmation and reminder to that email. Guest bookings are not linked to an account.
• Messages: messages and photos you exchange with a shop about a booking (in the Service or by replying to a RepairRide text), and your responses to repair estimates (approve or decline, plus any note).
• Saved payment cards: if a shop requires a card for its no-show policy, you choose “I won’t be there” for a mobile job, or you save a card for a rental deposit, you enter your card directly with Stripe, our payment processor. The card is saved on that shop’s own Stripe account and can’t be used at another shop. We receive and store only a Stripe identifier, the card brand, the last four digits and the expiration date, never the full card number. For a no-show policy or an “I won’t be there” job we also store the exact policy or authorization text you agreed to and when you agreed.
• Payments to shops: when you pay a shop through a pay link, its online store or its card reader, you pay the shop through Stripe on the shop’s Stripe account. We receive the amount, status and card brand and last four digits, not your full card number. If a shop offers financing and you choose Affirm or Klarna, that company collects your application information under its own terms and privacy policy.
• Online store orders: your name, email, phone, the items you order, whether you pick up or want local delivery or shipping, your delivery or shipping address and any delivery notes. While you type the address we show suggestions from Stadia Maps (see “Address suggestions” below). To check that a delivery address is within the shop’s area, we use the location of the suggestion you pick; if you type the address without picking one, your browser sends it to OpenStreetMap’s Nominatim geocoding service.
• Rentals: when you reserve equipment from a shop, the shop, the equipment and how many, your pick-up and return times, the price, any add-ons you pick (for example a helmet or a lock) with their prices, your note, and the saved card you choose for a deposit, if any. Rentals you reserve together are kept as one group. If the shop asks you to sign its rental waiver at pick-up, we keep the name you type to sign it, when you signed and which version of the waiver it was, and, if you sign as a parent or legal guardian, the name of the minor you sign for.
• Reviews: your rating, review text, and the display name shown with it (your account name).
• Preferences: your notification settings (email, text, push, and in-app “News & offers”).
• Support and business inquiries: the name, email, phone and message you send through our contact or “List your business” forms. These go to our mailbox and are not stored in our database.
• Waitlist: the email address you submit on our launch page (collected through Netlify Forms). We use it only to tell you about the RepairRide launch in Davis.

Information collected automatically

• Usage events: when you search, filter, view a shop or move through booking, we record the event, the shop or service involved, the search text you typed, a random per-visit session identifier, and your user ID if you are signed in. We use this to understand how people find shops and to give shops aggregate statistics such as how many people viewed their page. Our database does not record your IP address or a device fingerprint.
• How you found a shop: when you book or order, we save how you reached the shop’s page: campaign tags in the link (such as utm_source), Facebook, Instagram or Google ad click identifiers, the page you landed on (its path and campaign tags only), the referring site, and whether your browser sent a Global Privacy Control signal. If your browser sends that signal, the ad click identifiers are not stored at all. This is saved with the booking, and the shop sees reports of its bookings by source. We collect it ourselves; we do not place third-party advertising pixels on our site, and we do not send it, or any other information about you, to Facebook, Instagram, Google or other advertising platforms.
• Analytics cookies: our website and launch page use Google Analytics 4, which sets cookies and collects your device and browser type, approximate location derived from your IP address, pages viewed and referring site. We have disabled Google Signals and advertising personalization, so this data is not used to show you ads on other sites. You can opt out using the “Opt out” control in our analytics notice, at any time on Your privacy choices (linked in the footer of every page, including the launch page), with Google’s browser add-on, or by enabling Global Privacy Control in your browser. We do not use Google Analytics in the iOS app.
• Maps: our web map loads tiles from Stadia Maps, which receives your IP address and the map area you view under its own privacy policy. The iOS app uses Apple Maps on your device.
• Address suggestions: when you type a street address in RepairRide (where a mobile mechanic should come, a delivery or shipping address, or, for shops, the shop’s own address or a customer’s address at the counter), once three characters are typed your browser or the iOS app sends what you have typed to Stadia Maps to suggest matching addresses and, if you pick one, asks Stadia Maps for that address’s details. These requests go straight from your device to Stadia Maps, not through our servers, so Stadia Maps also receives your IP address, under its own privacy policy. When a shop types your address at its counter, the shop’s device sends it the same way. We save only the address you end up using, not the suggestions.
• Location (iOS only): if you allow it, the app uses your device location while the app is open to show your position on the map. Your location is used on your device and is not sent to our servers.
• Push tokens (iOS): if you turn on notifications we store a device push token so Expo’s push service and Apple can deliver notifications to your phone.
• Updates you have seen: when you are signed in, we save the time you last saw our “What’s new” product updates, so each update pops up only once. It is kept with your account and deleted when you delete your account. When you are not signed in, that time is kept only in your browser or on your iPhone.
• Server logs: our hosting provider (Netlify) and database provider (Supabase) keep standard technical logs such as IP address, request time and errors for security and operations under their own retention schedules. To limit abuse, such as repeated booking attempts, verification codes, promo code guesses or invalid API keys, our own database counts recent attempts under a scrambled form of the IP address, email, phone number or account involved, never the address, number or account itself, and clears out counts older than a day from time to time. Deleting your account does not remove these counts, but they no longer point to an account.
• Error reports: when something breaks on our website or our servers, an error report goes to Sentry, our error monitoring provider, so we can find and fix it. A report holds the error message and where in our code it happened, the page address with private link codes and anything after a “?” removed, the steps just before the error (which pages were opened, which buttons were tapped and which requests were made, by address only, and any error lines our code logged), your browser, operating system and type of device and their versions, and it may include which version of RepairRide was running. Before a report is sent we replace email addresses, phone numbers and long codes in it. We do not send Sentry who you are signed in as, your cookies, what you typed, or the contents of what you sent or received. Reports from your browser go straight to Sentry, so Sentry receives your IP address with the connection; we tell Sentry not to save it with the report. An error message can still, now and then, include another detail that was part of what failed, such as a name. We use these reports only to fix problems, not for analytics or advertising, so turning off analytics does not turn them off.
• Cookies and browser storage we set ourselves: we do not use advertising cookies or third-party advertising pixels. What our site stores in your browser, by name: sign-in (Supabase session, “sb-…-auth-token”; in demo mode “rr_auth_session_v1” and “rr_auth_users_v1”); your choices (“rr_mode” car/bike/snow, “rr_prefs”, “rr_browse_vehicle”, “rr_browse_location”, “rr_analytics_optout”, “rr_analytics_notice_seen”); how you found a shop (“rr_attr”, 28 days; “rr_referred”, 2 hours); a guest booking in progress (“rr_guest_hold_key”, “rr_pending_vehicle”, “rr_pending_legal”, “rr_legal_accepted_v1”); that you confirmed your email with a code (“rr_guest_email”, a cookie your browser sends only to our servers, kept 30 days, holding a signed reference rather than your email); what you put in a shop’s online store cart (“rr_cart_…”, one per shop, emptied when you sign out or place the order); things you have already seen (“rr_onboarded”, “rr_seen_shops”, “rr_banner_closed_…”, “rr_hint_off_…”, “rr_notif_seen_…”, “rr_news_…”, “rr_whats_new_…”); and, on a shop’s own devices, the console’s working copy (“rr_active_shop_…”, “rr_outbox_…”, “rr_cash_outbox_…”, “rr_reg_…”, “rr_drawer_…”, “rr_label_settings”, “rr_tag_preset”, “rr_sidebar_settings_open”, “rr_integrations_tab”, “rr_guest_views_…” saved Customers page filters, “rr_guestbook_audience”, “rr_sched_view”, “rr_sched_hide_closed” and “rr_sched_color” for how the Staff schedule is shown, “rr_msg_sound” for whether that device plays a sound when a new message comes in, a hand-off of picked customer ids to the Marketing page that is erased as soon as that page opens, “rr_staff_…” for who is working at the register, when the console was last used, whether it is locked or showing the Workshop display, and a scrambled check of each PIN used to unlock on that device so the register can unlock offline (never the PIN itself), and “rr_device_…” for when a business account last used the device, so that account signs out on that device after 7 days without use; signing out removes both, while changes waiting to sync stay). While a shop connects QuickBooks or Xero, we set “rr_acct_oauth”, a cookie your browser sends only to our servers’ connection page, kept at most 15 minutes and holding a signed check rather than any account detail, so that only the person who started the connection can finish it. Cloudflare Turnstile, which checks that guest bookings come from a person, sets its own cookie on our booking page. The iOS app keeps your sign-in and settings on the device.

Information shops and others provide about you

• Phone and walk-in bookings: a shop may enter your name, phone, vehicle and notes into RepairRide to schedule you, and may record that you said yes to texts about that booking or to the shop’s marketing email (we keep who recorded it and when). Shops are responsible for telling you they use RepairRide.
• Rentals at the counter and rental records: a shop may enter your name, phone, email and a note to rent you equipment at its counter and, if you don’t have a RepairRide account, may record that you said yes to text reminders about that rental (we keep who recorded it and when). For every rental the shop records when the equipment went out and came back, its condition each time, any damage note and charge, any late-return charge, and what happened to the deposit (held on your card, kept in part or in full, released, or taken at the counter).
• Shop records: shops using our shop-management tools may keep notes, tags, vehicle records, sales, special-order details, store credit, gift cards, loyalty points and rewards, charge-account balances, tax-exempt status, whether you agreed to receive their marketing email, online store orders and receipts about their customers. Shops may also import customer records from the system they used before RepairRide. These are the shop’s business records. You can see your bookings, messages, receipts and loyalty balance in your account; you cannot see a shop’s internal notes about you. Ask the shop.
• Job updates: shops record arrival, progress, hold notes, inspection reports (which may include photos of your vehicle), completion and payment status for your appointment. We show these to you as status updates and on a live job page, along with the first name of the person working on your job.
• Badges: if RepairRide gives your account a badge (for example “Founder”), shops you book with see it on your booking and customer record.

We do not knowingly collect government ID numbers, bank account numbers, health information or precise location history. Please do not type sensitive information into notes or messages.

How we use information

To create and secure your account; to make, confirm, change, cancel and remind you about bookings and rentals (for a rental: a pick-up reminder, a reminder before it is due back and one notice if it is overdue); to pass bookings, messages and photos to shops and their updates to you; to send transactional emails, texts (if you opted in), push notifications (if you turned them on) and in-app notices; to store a card and let a shop charge it only under a policy or authorization you agreed to; to process payments and online orders you make to shops; to deliver repair estimates and inspection reports; to show your receipts, live job page and loyalty balance; to show reviews; to send a shop’s marketing and review-request emails on its behalf as described below; to show each shop which sources its bookings came from; to build de-identified statistics such as typical labor times from completed jobs; to prevent fraud, fake bookings and abuse (including rate limits); to understand usage and improve the Service; to give shops aggregate statistics; to respond to support requests; and to comply with law and enforce our Terms.

Missed appointments. [When a shop marks an online booking as a no-show, RepairRide uses that record, together with no-shows at other shops on RepairRide matched to you by your account (including its verified phone number) or the email you booked with, to apply the booking limit described in our Terms of Service (two no-shows within 90 days). Shops never see no-shows at other shops or whether your online booking is limited; each shop sees only its own bookings. A no-show stops counting toward the limit after 90 days, and the booking record itself is kept as described under “How long we keep information.”]

In-app “News & offers” are shown only if you turn that setting on. RepairRide does not currently send its own marketing email or marketing texts. If we start, we will ask first and every message will include a way to opt out.

Emails from shops. A shop using RepairRide can send you marketing email (for example a tune-up reminder or a sale) through RepairRide only if you said yes to that shop: by ticking the unchecked “Email me news and offers from…” box after you book or check out, by switching the shop on under Your privacy choices, or by telling the shop in person, in which case the shop records your yes along with who recorded it and when. We keep a record of each yes and no (when, the wording you saw, where it came from, and a scrambled form of your internet address and browser). The shop chooses who gets each email from its own records about you, for example your visits, your bike or vehicle (such as its make, model, year or mileage), tags it has given you, your loyalty balance or what you have spent. A shop’s email may include a promo code and items from its online store (photo, name and price). Besides the emails it writes and sends itself, a shop may turn on automatic emails, which stay off until it does: a reminder when a service is due, a follow-up listing work from an inspection that you decided not to have done, with the price the shop quoted, a note after your first visit, a note when you haven’t visited for a while, a reminder about an online store order you started but didn’t pay for, and a note when a loyalty reward is waiting or points are about to expire. Automatic emails follow the same rules as the shop’s other marketing email: they go only to people who said yes to that shop, and the same unsubscribe stops them. A shop may also send one “How did we do?” email after a visit or purchase, no more than once every 90 days; we treat that as part of the service you booked, it carries the same unsubscribe link, and you can leave the same review from your booking in RepairRide. Every one of these emails is sent by RepairRide on the shop’s behalf, from our address with the shop’s name (“Shop name via RepairRide”), with replies going to the shop and our postal address in the footer. Each includes a one-click unsubscribe; unsubscribing stops that shop’s emails to that address even if the shop later re-creates your record, and only you can turn them back on. Neither RepairRide nor shops send marketing texts through RepairRide.

Bounces, spam reports and clicks. Our email provider, Resend, tells us when a shop’s email to you bounces or when you mark it as spam. If you mark a shop’s email as spam, that shop’s marketing and “How did we do?” emails to that address stop, as if you had unsubscribed, and the shop sees this on your customer record. If an email bounces because the mailbox doesn’t exist, every shop that has that address on file stops sending marketing and “How did we do?” email to it, and sees on your customer record that it bounced. Emails about your own bookings and orders still go to that address. The links RepairRide puts in a shop’s marketing email (its button, the shop’s booking link and any store items) go through a RepairRide link that records which of them was clicked in the email sent to you, when, and how many times, without your internet address or browser, so the shop can see how many people clicked each link and how many unsubscribed from each email. Links a shop types into its own message go straight to the site and aren’t recorded. Shops see those totals, not who clicked. We do not use tracking pixels or check whether you opened an email.

How we share information

We do not sell your personal information and we do not share it with data brokers. We share it only as follows:

• The shop you book, rent or buy from receives your name, phone, email (for shops using our full shop tools), vehicle details including any VIN, plate, serial or notes you entered, booking photos and any insurance details, your booking, rental or order details including a delivery or shipping address and the name you signed a rental waiver with, how you found its page (see “How you found a shop”), your messages and photos, your estimate and inspection responses, your loyalty activity and any badge on your account. Shops can export their own records, including this information, for their business records. Under our agreement with them, shops may use it to serve you and run their business and must protect it; shops are independently responsible for their own privacy compliance.
• Service providers that process data for us under contract: Supabase (database, file storage and sign-in), Netlify (hosting, forms and scheduled jobs), Stripe (payments and saved cards), Resend (email), Twilio (text messages, including your replies), Expo (push delivery), Sentry (error reports, as described above), Google (analytics as described above, and Google and Apple as sign-in providers), Stadia Maps (map tiles and address suggestions as you type), OpenStreetMap Nominatim (checking delivery and mobile service addresses typed without picking a suggestion, and placing shop addresses on the map), Zippopotam.us (city and state for a ZIP code typed at a shop’s counter) and NHTSA’s public vehicle database (VIN decoding). Stripe also acts as the payment processor for the shop when you pay a shop or a fee is charged, and cards you save for a shop are kept on that shop’s Stripe account.
• Systems a shop connects: a shop may connect its own tools, and information flows to them as the shop directs: its accounting software (QuickBooks Online or Xero receives daily sales totals; RepairRide handles that data for the shop, not on behalf of Intuit or Xero, and deletes the shop’s accounting-company details, account mapping and posting log when the shop disconnects), its parts suppliers (PartsTech and bike distributors receive the vehicle (including a VIN) and parts the shop looks up for your job), its online store channels (Shopify and Google receive the shop’s product listings, not customer information) and its own systems through our Partner API and webhooks. The shop is responsible for those providers.
• Other users: your review and display name are public. Your messages go to the shop. If you respond to an estimate, the shop sees your response. If a shop shows its Workshop display on a screen in the shop, people there can see your first name and last initial, vehicle, service, job number and promised time (never your phone, prices or notes).
• Legal and safety: to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property or safety of RepairRide, users, shops or the public.
• Business transfers: if RepairRide is involved in a merger, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• Aggregated or de-identified data that cannot reasonably identify you, such as how many bookings happened in Davis last month.

Do Not Track and Global Privacy Control. Our website does not respond to browser “Do Not Track” signals. We treat a Global Privacy Control signal as a request to turn off analytics for that browser and not to store ad click identifiers; you can see this on Your privacy choices. Third parties named above (Google Analytics, Stadia Maps) may collect information about your activity on our site over time; we do not permit them to use it to target you with advertising on other sites.

How long we keep information

• Account, Garage, saved shops, saved cards, preferences and push tokens: until you delete your account (or a push token stops working).
• Bookings: kept as part of each shop’s business records. When you delete your account your name, phone, email, VIN, plate and notes are removed from your past bookings (see “Deleting your account”). Shops may be required to keep repair and tax records for years under California law.
• Rentals: kept as part of each shop’s business records. When you delete your account your name, phone, email and note, the name you signed the waiver with, any minor’s name and the card brand and last four digits of any deposit hold are removed (see “Deleting your account”); the shop keeps the rental itself (equipment, dates, prices, charges and what happened to the deposit) and the date and version of the waiver that was signed.
• Booking photos, insurance details, message photos and online orders (including delivery addresses): kept with the booking or order until you delete your account (see “Deleting your account”). Inspection reports, loyalty activity and the shop’s customer record are the shop’s business records.
• Text-message records (what we sent or received, when, and whether it was delivered): kept with the booking and in our text log for fraud prevention and carrier compliance.
• [Booking limit records (which no-show started a limit on your online booking, when the limit ends, and when we emailed you): deleted 30 days after the limit ends.]
• Guest email codes (a scrambled form of the email address and of the code, how many tries were made and when it was confirmed, never the address or the code itself, and not linked to an account or booking): we clear out records older than 31 days from time to time.
• Consent and opt-out records (texts and shop email: each yes and no, when, the wording, where it came from, and addresses stopped because an email bounced or was marked as spam): kept for at least four years after the last message so we can show what you agreed to and so a number or address you opted out stays opted out. Deleting your account removes your name, internet address and browser details from these records but keeps the opt-out itself.
• Shop email records (who each email went to, whether it bounced or was marked as spam, whether you unsubscribed from it, and which links were clicked): kept with the shop’s records for that email. The click record is deleted when you delete your account (see “Deleting your account”).
• Notices from our email provider about bounces and spam reports (the notice and which email it was about, never your address), and our record of which shop email went to which customer record, used to match those notices (never your address either): 90 days.
• Records of a shop accepting the Provider Agreement or its deal terms (who accepted, their name and email, the shop, the terms, when, and the browser used): kept as our record of what was agreed, including after the shop or the login is closed.
• Messages: kept with the booking; your name is detached when you delete your account.
• Reviews: kept and shown as “Former customer” after you delete your account; you may ask us to remove a review.
• Usage events: 13 months.
• Error reports (Sentry): up to 90 days, then Sentry deletes them.
• Google Analytics: 2 months.
• Support emails and waitlist entries: in our mailbox or Netlify until no longer needed.
• Backups: our providers keep encrypted backups for a limited period after deletion.

Deleting your account

You can delete your account in the iOS app (Account → Delete account) or on the website (Account → Delete account). When you do, we:

• delete your login, profile, Garage, saved shops, notification settings and push tokens, and your saved cards, including cards you saved for a shop, which we remove from that shop’s Stripe account;
• delete photos you attached to bookings or sent in messages, and remove insurance details and the card brand and last four digits from your bookings;
• cancel your upcoming appointments that have not started (no late-cancellation fee is charged for these);
• decline any estimate still waiting for your answer;
• remove your name, phone, email, VIN, license plate and vehicle notes from your past bookings, which shops keep for their records, and reduce how-you-found-us details to the general source (for example “Instagram”);
• delete the record of which links you clicked in shops’ emails;
• remove your name, email, phone, delivery address and notes from your online store orders (for an order that is still being prepared or delivered, as soon as it is completed or cancelled);
• cancel your rental reservations that haven’t been picked up (if a deposit was held on your card, it is released), and remove your name, phone, email and note, the name you signed the shop’s waiver with, any minor’s name and the card brand and last four digits of any deposit hold from your other rentals (for equipment you still have, as soon as it is returned; until then we still send the return reminder and any overdue notice to the email on that rental, and the shop can still reach you about it); and
• keep your reviews under “Former customer” and keep messages you sent without your name attached.

What deletion does not do: it does not delete records a shop keeps about you in its own systems or in its RepairRide shop tools (its customer record, notes, sales, receipts, special orders, loyalty points and store credit), or inspection reports a shop made of your vehicle, or the condition and damage notes on a shop’s rental records. For those, contact the shop. Payments you already made to a shop stay in that shop’s and Stripe’s records. If you booked or ordered as a guest, or rented at a shop’s counter without an account, email privacy@repairride.com from the email you used (or gave the shop) and we will remove your name, phone, email, VIN, plate, notes, photos, insurance details, delivery address, waiver signature and any minor’s name from those bookings, orders and rentals.

Your other choices and rights

• Access and update: name, email, phone, vehicles, saved shops and preferences in your account. If you change your email, we also update it with the shops you have booked with.
• Email, text, push, offers: manage in Preferences (web) or Settings → Notifications (iOS). Booking confirmations, reminders, status updates, estimates, receipts and charge notices are part of the Service; you can turn off email or text reminders but we will still show them in the app. Rental reminders follow the same settings. For a rental made at a shop’s counter without an account, reminders go to the email the shop entered, and by text only if you said yes. Reply STOP to any text to stop texts, or tell the shop, who can record it for you.
• Shop emails: use the one-click unsubscribe link in any marketing or review-request email from a shop, switch the shop off under Your privacy choices (web) or Settings → Notifications (iOS), or ask the shop. A shop cannot turn its emails back on for you; only you can.
• Reviews: contact support to edit or remove a review.
• Analytics: see “Information collected automatically.”
• Requests: email privacy@repairride.com. We verify requests by replying to the email on the account (or the booking email for guests) and respond within 30 days. You may use an authorized agent if you give us written permission we can verify. We will not discriminate against you for exercising any right.
• California residents: if the California Consumer Privacy Act applies to us (it applies to businesses above certain revenue or data thresholds that we do not currently meet), you have the rights to know, delete, correct and opt out of sale or sharing, and we will honor them as described above. We do not sell or share personal information as those terms are defined in that law.

Text messages (SMS)

What we send. If you opt in to Text message reminders in Preferences → Notifications on repairride.com or Settings → Notifications in the iPhone app, RepairRide texts you about your own bookings: confirmations, reminders, a new time when the shop moves your booking, updates from the shop on your repair (for example “ready for pickup”), estimates to approve, order pickups, rental pick-up and return reminders and an overdue notice, and messages the shop writes to you about your booking. Texts come from RepairRide’s number and start with “RepairRide”; a message from a shop also shows the shop’s name. We never send marketing or promotional texts, and shops cannot send marketing texts through RepairRide.

Replying. You can reply to a text from a shop. Your reply goes into that booking’s message thread in RepairRide, where the shop sees it. All shops use the same RepairRide number, so we match your reply to the shop that texted you most recently. Replies are stored like other messages.

Consent. Texts are off until you turn them on. Before they can be turned on for your account we text a one-time code to the number to confirm it is yours; changing the number on your account turns texts off until you confirm the new one. Turning them on is not a condition of booking or of any purchase. If you book without an account, you can tick a separate box to get texts about that booking only; if you book by phone, the shop may record that you said yes to texts about that booking, and the record shows who at the shop recorded it. A shop may likewise record that you asked for a text when a special-order part arrives. If you rent equipment at a shop’s counter without an account, the shop may record that you said yes to text reminders about that rental, also with who recorded it. We keep a record of each yes and no: when, the exact wording you agreed to, where it came from (web, the app, a booking, or a shop), who recorded it, and a scrambled form of your internet address and browser. Message frequency varies with your bookings (usually 1–5 messages per booking, plus any conversation you have with the shop). Message and data rates may apply.

Stopping and help. Reply STOP to any text to stop all texts, or turn the setting off. We also honour a stop you put in your own words (for example “please stop texting me”) and a stop you give the shop, who can record it for you; either stops every RepairRide text to that number until you reply START or turn texts on again yourself. Reply HELP for help, or email support@repairride.com. Carriers are not liable for delayed or undelivered messages.

No sharing of mobile information. We do not share, sell or rent your mobile phone number or text-message consent with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, except the service providers that deliver our texts (Twilio) under contract.

See Text messages for the full text-message terms.

Security

We use access controls (including row-level database security and optional two-factor authentication), encryption in transit, hashed passwords and payment tokenization through Stripe. No system is perfectly secure and we cannot guarantee security. If we learn of a breach affecting your unencrypted personal information we will notify you as California law requires. If you think your account has been compromised, change your password and contact us immediately.

Children

The Service is for adults. We do not knowingly collect personal information from anyone under 18, except that when a parent or legal guardian signs a shop’s rental waiver for a minor, we keep the minor’s name they enter with that rental as described in “Rentals” above, and remove it as described in “Deleting your account”. If you believe a child has given us information, contact us and we will delete it.

Shop owners and staff

If you run a shop on RepairRide we collect your name, email, phone, business name and address, hours, services, prices, photos, store listings, your website link, amenities and accepted payment methods and, for shops using payments, Stripe Connect identifiers and your Terminal location. For your RepairRide plan we keep your plan, billing status and the brand, last four digits and expiry of the card you pay us with (Stripe holds the card), plus your text-message usage, the booking fees on your completed marketplace bookings (which appointment, when it was completed and billed, and any review of the fee), the terms we agreed with you (such as free months, a discount or a booking fee waiver) and any change we propose to them, a record of each time the owner accepts the Provider Agreement or those terms (the name and email of the person who accepted, the shop name, the plan and terms at that moment, when, and the browser used), a record of each change we make or propose to those terms or fees (who at RepairRide made it, when and why), and the shipping details for any equipment you order through us. If we pause your shop’s marketing email, we keep when and why (the complaint or bounce counts that set it off, or the reason a RepairRide admin gave) and a record of who at RepairRide paused it or turned it back on. If you design your shop’s receipts, we keep that design for your shop: a small black-and-white logo, your website and social handle, the messages and returns and warranty policy you write, which details your receipts show (including whether they carry a QR code to your booking page or to leaving a review), and which staff member last changed it. Your returns and warranty policy also appears on the receipts we email your customers. The design is deleted with your shop. If your shop uses Messages, we keep the saved replies your shop writes (a title and the text) and, for each conversation, whether it is marked Done (and when) or unread, but not who marked it. Everyone at your shop can use saved replies; adding, changing or deleting them needs the Shop profile permission. Saved replies are deleted with your shop, and a conversation’s marks with its booking or your shop. For each part of your payment settings (ways to pay, cash, receipts, taxes and the end-of-day recap), your no-show and cancellation policy, and your team settings (PIN switching and lock, team members’ own devices, registers, time clock, leave and holidays, and commissions), we keep who last changed it and when, so the console can show “Last changed by…”: the name of the staff member working at the time, or “Owner”, “Staff login” or “RepairRide support” when there is no staff record. We record changes made by people only, not by our automatic jobs, and we do not keep the old or new setting. Staff with the Shop profile permission can see it. It is kept with your shop’s records, including the name after a staff member is removed, and deleted with the shop. Staff with the Payment settings permission can also see your Stripe payout schedule, the bank name or card brand and last four digits your payouts go to, and the name customers see on their card statements. We read these from Stripe each time and do not store them. Your business name, address, phone, hours, services, prices, photos, store listings, website link, amenities, accepted payment methods and reviews are public once your listing is live. Staff names, roles (including your shop’s own named roles, each with its permissions, approvals, limits and screen settings), permissions, which actions need a manager’s approval, discount, refund and paid-out limits, each person’s hidden and pinned tabs, start page and screen-lock settings, PIN hashes, the email the shop enters for each person and, for staff who sign in with their own RepairRide account, their login email are stored for your shop, along with when each PIN was set and who set it (each person can see this for their own PIN) and when each PIN sign-in on a shop device started and was last used (so the console locks after the shop’s idle time). When the owner or someone with the People permission sends a person a link to pick their own PIN, we keep that open invitation (the email it went to, who sent it, when it was sent and when it expires) and delete it when it is used, replaced or cancelled, when the person’s email, role or permissions change or they are made inactive, or 30 days after it expires. We keep only a scrambled check of the link, never the link itself. Staff with the People permission can see who has an open invitation, the email it went to, and when it was sent and expires. We also keep a security log of every attempt to set or change a PIN (whose PIN, who tried, when, whether it was chosen from an emailed link (and who sent the link) or handed over at the register, and whether it was set, cleared, already in use or refused for too many tries), which we use to limit how often a PIN can be changed. The shop’s owner, and a GM signed in as themselves with a current two-factor code, can see these attempts (whose PIN, who tried, when and the result) in the Activity report; no one else can. If your shop uses the time clock, we also keep each person’s time records for your shop: when they clocked in and out, their breaks, where each punch came from (for example the register, their own login, or a device that was offline, in which case the device’s time is used), when a shift was flagged as missing its clock-out because it stayed open longer than the shop’s limit (16 hours by default), how each clock-out was recorded (a punch; a time the person gave later because they forgot to clock out, with when they gave it and whether it came from a PIN sign-in or their own login; or a time a manager set and, if the person clocked in themselves, their yes or no to it, when they answered and how), whether a shift was closed by the automatic clock-out at 11:59 PM that RepairRide used before, breaks that no longer count because a manager removed them or they fell after the end time (we keep them, with the reason and when), their answers about whether they took their meal break and their 10-minute rest breaks (given at clock-out, or for a meal break, from their own sign-in up to 45 days later, and we note which), and every change or void a manager makes, with the old and new times, who made it, when and the reason. When a shift is flagged for a possibly missed meal break, a manager can record how it was settled (paying the premium, or that the worker chose to skip the break or took it but did not punch it) with a short note. The last two take effect only if the worker agrees from their own sign-in. Likewise, if a manager changes a shift’s punches in a way that would remove a meal premium, the premium stays until the worker agrees from their own sign-in. For each of these we record their answer (yes or no), when they gave it, and whether it came from a PIN sign-in or their own login. These records are your shop’s business records. Each person can see their own, and staff you give the Time cards permission for everyone can see everyone’s and the change history. We do not send time records to anyone; your shop can download a file to give its payroll provider. If your shop uses cash drawers, we also keep each drawer’s record for your shop: who opened it and with how much cash, who it was assigned to and every change to that (from whom, to whom, when and who made it), each cash payment taken into it (who took it and the ticket number or service, not the customer’s name), each paid in, paid out and drop to the safe (who entered it and any note), each count (who counted it, and any count sent back for a recount and by whom), who closed it, whether it was handed off to the next person, and its over or short, which our reports show under the person the drawer was assigned to. Staff you give the Cash drawer permission can see each drawer’s history, and staff you give the Money reports permission can see closed drawers and each person’s over or short. The end-of-day close-out, including the copy we email to your shop’s recap address and to up to four more addresses the shop adds (for example its bookkeeper), one email to each, shows each drawer’s person, who counted and closed it, and who it was handed off to. The nightly copy also lists sales still on hold, with the name the shop entered on the ticket. We keep the addresses with your shop’s settings until the shop changes them or the shop is deleted. These records are your shop’s business records and are kept with your shop’s records. If your shop uses scheduling, we also keep each person’s shifts and time off: the dates or hours, the kind (unpaid, sick leave or PTO), the reason they give, who approved or denied it and when, their sick leave and PTO balances and how each was earned or used, and every change a manager makes to approved time off (the old and new dates, kind and hours, who made it, when, and the note). If a person sets their availability, we keep the days and hours they can work each week, the most hours they want a week, the date it starts, their note, and who approved or denied it, when, and any note they added, including earlier versions so past schedules stay as they were. Each person can see their own; staff you give the Scheduling permission can see everyone’s time off and its change history and everyone’s availability, and staff you give the Scheduling or Pay rates permission can see everyone’s balances. The change history cannot be edited, and it is deleted when the time off, the person’s staff record or the shop is deleted. Availability is deleted with the person’s staff record or the shop. We email staff, at the email on their staff record, about their published schedule, their time off (when a request is approved or denied, and when a manager changes, cancels or ends it early) and their availability (when a change they asked for is approved or denied). When the shop asks, we also email a person a link to pick their own PIN (it works once, for 7 days, and needs no sign-in), sent to their login email if they have one and otherwise to the email on their staff record, and, if the owner invites them to sign in with their own RepairRide account, that invitation, sent to the email the owner enters. If someone is made a GM, we email the shop owner’s login address with their name and when it happened; this is a security notice and cannot be turned off. We keep a record of each such notice (the person’s name and when it was made and sent) with your shop’s records, and delete it with the shop. We email the shop’s schedulers when a time off or availability request comes in. If the shop turns on emails for its automatic order sheet, we email the owner’s login email and active staff with the Ordering permission (at the email on their staff record, or their login email if there is none) when the order sheet adds to the shop’s draft purchase orders. The email lists the suppliers and order numbers and shows dollar totals only to the owner and staff with the See costs permission. These emails are about work only and contain no promotion. Staff with the Campaigns permission can also send themselves a test copy of the shop’s marketing email; it goes only to their own login email. We also keep a history of changes to each person’s role, shop role, permissions, which actions need a manager’s approval, discount, refund and paid-out limits and active status, including when they were added, and of each time one of your shop’s roles is saved or deleted (who made each change, when, and the before and after), which the shop’s owner and staff with the Give Discounts / Refunds permission can see. This history is kept with your shop’s records, including the names involved after a staff member is removed. When an action needs a manager’s approval, the manager types their PIN on the device of the person asking, and we keep a record of each approval: which action, who asked, whose PIN approved it, when it was given and when it was used. Each approval works for one action within 2 minutes; we keep only a scrambled check of its one-time code. The shop’s owner and staff with the Give Discounts / Refunds permission can see these records. Used approvals are kept with your shop’s records; one that is never used may be deleted after a day. If a staff record is deleted, its approvals stay but no longer name that person. They are deleted with the shop. When someone adds a note to a customer’s record, we keep the name of the staff member who wrote it, as it was then, and when it was written and last edited; staff who can open that customer’s record see this with the note. The note and the name stay with your shop’s records after the staff member is removed. Only the person who wrote a note, or staff with the Edit customers permission, can edit or delete it. The first name of the person working on a job is shown to that customer and, if the shop turns on the Workshop display, on a screen in the shop. If the shop turns it on in its receipt design, printed receipts show the first name of the person who worked on the job or rang up the sale. If your shop rents equipment, we also keep your rental settings and add-ons (your late-return rule and the add-ons you offer online are shown on your shop page) and each unit’s history: when it was serviced, sent to maintenance, put back in service, retired or damaged, any note, and which staff member logged it. These are your shop’s business records and are deleted with the unit or the shop. Technician clock-in times and labor hours on completed jobs are used, without identifying you, your staff or customers, to build RepairRide’s labor-time statistics. Credentials you enter for connected services (accounting, distributors, PartsTech, Shopify) are stored so only our servers can use them. Your use of customer information is governed by the Provider Agreement.

Changes to this policy

We will post changes here with a new version number and effective date. For material changes we will email account holders and show a notice in the Service at least 14 days before the change takes effect. Continued use after the effective date means the new policy applies.