This Privacy Policy explains how RigBoss Software ("we," "us") collects, uses, and shares information in connection with the Mech Correct software platform, its websites, and its customer-facing pages (together, the "Service"). It supplements our Terms of Service and End-User License Agreement.
Shops — the automotive businesses that subscribe to Mech Correct — and shop customers — the vehicle owners those shops serve. For the business records a shop enters or collects (its customers' names, contact details, vehicles, repair history, messages, photos, signatures, and payments), the shop is the owner and controller of that data and we process it on the shop's behalf to provide the Service. If you are a vehicle owner with questions about how a specific shop handles your information, contact that shop; this policy explains what our platform does with the data.
Shops running the Service in standalone (offline) mode store their data on their own device; we receive no copy of it.
We do not sell personal information, and we do not use shop customers' personal information for advertising.
AI-assisted features send the submitted question, photos, vehicle context, and relevant service-history snippets to our AI infrastructure provider (currently Anthropic) to generate a response. These requests are made under commercial terms that do not permit the provider to use them to train generalized models. AI queries and answers are logged for the shop's history and for cost and quality monitoring.
Shops may opt in to a network that shares sanitized vehicle service events between participating shops: VIN, date, mileage, shop name, and a description of the services performed. Customer names, contact information, pricing, and private notes are excluded by design and enforced server-side. Lookups are logged for audit. Shops control their participation in their settings.
Messages sent through the Service come from the shop, using messaging providers such as Twilio. Message content, recipient numbers, and delivery status are stored so the shop has a complete conversation record. Shop customers can opt out of a shop's messages by replying STOP, and should direct messaging preferences to the shop that serves them. Consent to receive messages is collected and managed by the shop; text-messaging opt-in consent is not shared with third parties for their own marketing.
The Service uses cookies and browser storage for sign-in sessions, preferences, and (in standalone mode) storing the shop's data on the device. Our marketing website does not use third-party advertising trackers.
We use industry-standard safeguards: encryption in transit, encrypted storage with role-based access controls, row-level security isolating each shop's data, service-role-only storage for integration credentials, and audited access paths for shared data. No system is perfectly secure; we encourage shops to use strong credentials and to limit user access appropriately.
We retain data for as long as the shop's account is active and as needed for the purposes above. Shops can export their business records at any time with built-in tools, and may request deletion of their account data after termination, subject to legal retention requirements and de-identified records (including network contributions) that no longer identify a person.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Shops can exercise most of these directly with in-app tools, or by contacting us. Because we process shop customers' information on behalf of shops, we will refer vehicle-owner requests to the relevant shop and support the shop in fulfilling them. We do not discriminate against anyone for exercising privacy rights.
The Service is a business tool, not directed to children under 13, and we do not knowingly collect children's personal information. If you believe a child's information was provided to us, contact us and we will delete it.
The Service is operated from the United States and data is processed on U.S.-based infrastructure. If you use the Service from outside the United States, you understand your information is transferred to and processed in the United States.
We may update this policy as the Service evolves. Material changes will be posted at this page with a new effective date, and continued use after the effective date constitutes acceptance.
Privacy questions or requests: hello@mechcorrect.com, or write to RigBoss Software, Attn: Privacy.