WrenchRoute is run by Daniel Bitzane and Chris Gignilliat. This policy says what the app collects, why, and who can see it.
The short version: your shop's records, and a field worker's latest position while he is on duty or still has an open job — seen by the people in his own company, no trail of where he has been, and that last position is cleared 90 days after his phone stops reporting. Your shop's card details are held by Stripe, never by us. Nothing is sold, nothing is shared with another shop, and nothing is used to train artificial intelligence.
WrenchRoute is operated by Daniel Bitzane and Chris Gignilliat.
Most of what is in the app was put there by your shop, about its own business. Your shop decides what is collected and who at the shop can see it, and we handle it on your shop's instructions. If you have a question about your own information, ask your employer first; a request that reaches us is passed to them.
In the language of data-protection law: for your shop's records — its business records, your account as one of its staff, and your phone's position — your shop is the controller and we are its processor. For what we hold to run and protect the service itself — your shop's billing with us, sign-in, two-step and security records, error logs, and which version of these documents you accepted — we are the controller.
Five kinds of information:
This is the most sensitive thing the app handles, so it is worth being exact.
If you are a technician or a parts runner, your phone reports its position while you are signed in and on duty, including while the app is in the background, because a call can come in while your phone is in your pocket. The phones of other accounts do not report a position.
You are off duty when you have pressed Off duty under your name (it lasts until you press On duty), on a day of approved time off, and on a day your shop's schedule says you do not work unless you pressed On duty that day. While you are off duty your phone does not report a position — unless you still have an open job: a call you have accepted and not finished, or for a parts runner a run not yet delivered. Then it keeps reporting until that job is done. It also stops when you sign out. You can switch it off in your phone's settings.
It is used for two things: showing dispatch where the trucks are, and noticing automatically that you have arrived at a job.
We keep no trail: your account holds the latest position and each report overwrites the one before, so there is no record of where you were an hour ago. If your phone stops reporting, that last position is cleared automatically after 90 days by a job that runs every night.
The times you arrived at and left a job are recorded on the job itself. They are part of your shop's records and are kept for as long as your shop keeps the job.
Your position can be seen by the people in your own company — anyone your shop has given an account, whatever their job title, not only dispatch and the managers — and by us only when we are fixing a fault. Nobody outside your shop sees it.
To run the dispatch service for your shop: to show the board, ring the right phone, route the right technician, build your shop's reports, keep the service secure, and fix it when it breaks.
Where the EU or UK General Data Protection Regulation applies, each kind of information is handled on one of these grounds (its Article 6):
We do not sell any information. We do not show one shop's information to another shop. We do not use any shop's data to train artificial intelligence models. We do not contact your shop's customers ourselves.
Only the services the app needs to run, and each one handles only its part:
We may also disclose information if the law requires it, or to protect someone's safety. If the business is sold, information passes to the buyer and this policy continues to apply.
Your last known position: cleared 90 days after your phone stops reporting. Error logs: 30 days. Your shop's business records, including the times recorded on jobs: for as long as your shop has an account, and then deleted within 60 days of your shop asking. Your account details are removed when your shop removes your account.
The first two are done automatically every night, and each run is recorded so that we can show it happened.
Information is encrypted while it travels and while it is stored, held on Google's infrastructure, and reachable only by an account that has been given access — enforced on the server, not just in the app. Our own access to the live system requires two-factor authentication.
No system is perfectly secure. If information is exposed, we will tell the affected shop promptly and say what happened.
You can go off duty at any time under your name in the header, which stops position reports unless you still have an open job. You can also turn off the phone's location permission at any time in your phone's settings, which stops position collection.
Notifications are sent only if you allowed them when your phone asked, and you can turn them off at any time in your phone's settings. Two-step sign-in by text message is on only if you turned it on, and you can turn it off under your name in the header.
Your account can be deleted from inside the app, under your name in the header.
Where the EU or UK General Data Protection Regulation applies, you have the right to ask:
You also have the right not to be subject to a decision made solely by automated means that has a legal or similarly significant effect on you. The app makes no such decision: what it does automatically, such as noticing that you have arrived at a job, has no legal effect on you, and anything that matters is decided by a person at your shop.
You have the right to complain to a data-protection supervisory authority, such as the one where you live or work. We would rather you came to us first, but you do not have to.
If you live in a US state with a privacy law — California, under the California Consumer Privacy Act, among them — you have the right to know what personal information is collected about you and how it is used, to have it deleted, to have it corrected, and to opt out of its sale or its sharing for advertising. We do not sell personal information and do not share it for advertising, so there is nothing to opt out of.
Wherever you live, you can ask for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. To do that, or to use any of the rights above, email privacy@wrenchroute.app. Your account can also be deleted from inside the app. Where your shop controls the information you can ask your shop directly; a request that reaches us is passed to your shop and we help them answer it. We may need to confirm it is you before acting, and we answer within one month. Exercising any of these rights costs you nothing and changes nothing about how you are treated.
WrenchRoute is used by businesses and their staff. It is not for anyone under 18, and we do not knowingly collect information from anyone under 18.
If this policy changes, the version and date at the top change with it, and the new version is published here. If the change matters, you will be asked to accept it at your next sign-in.
Daniel Bitzane and Chris Gignilliat — privacy@wrenchroute.app.