Privacy Policy
This policy explains what BlueWrench HQ ("BlueWrench," "we") collects and how it's used. BlueWrench is business software used by service shops ("Shops"). We handle two kinds of people's information: Shop staff, and the Shop's customers.
1. Information we collect
- Shop account data: shop name, owner contact details, login credentials (passwords are stored as managed secrets, never in plain text in the application database), and billing information.
- Shop customer data (entered by the Shop or its customers): customer names, phone numbers, service orders and notes, invoice amounts, text-message history with the Shop, and SMS consent/opt-out status with timestamps.
- Technical data: standard server logs (IP addresses, timestamps, request metadata) used for security and troubleshooting.
2. How we use it
- To operate the platform: intake, order tracking, price calculation, sending the Shop's invoice and service texts, and two-way messaging.
- To secure the service (authentication, rate limiting, abuse prevention) and to debug problems.
- We do not sell personal information, use Shop customer data for advertising, or contact a Shop's customers except on that Shop's behalf.
3. Text messaging
Texts are sent on each Shop's behalf from a number registered to that Shop. Consent is recorded when a customer is added; replying STOP to any message opts the customer out, which we record and honor automatically. Message content and delivery status are stored so the Shop has an accurate history.
4. Data isolation and ownership
Each Shop's data is segregated per shop inside our systems and is accessible only to that Shop's authenticated users (and to us, for operating and supporting the service). The Shop owns its customer data and can export it (CSV) at any time.
5. Service providers
We use a small number of infrastructure providers to run the service: Amazon Web Services (hosting, storage, databases; data encrypted at rest) and Twilio (text-message delivery). These providers process data only to provide their services to us.
6. Retention
We keep Shop data for as long as the Shop has an account, plus a 30-day export window after cancellation. Backups are retained for 14 days. Logs are retained on a rolling basis for operational needs.
7. Your choices
- Shop customers: to access, correct, or delete your information, contact the Shop you did business with; they control their customer records and we act on their instructions. To stop receiving texts, reply STOP to any message.
- Shops: contact us to correct account information or delete your account and data.
8. Security
Data is encrypted in transit (HTTPS) and at rest. Access is authenticated and scoped per shop. Webhooks from our SMS provider are cryptographically verified. No system is perfectly secure; we notify affected Shops promptly of any breach affecting their data.
9. Changes
We'll post updates here and notify Shops by email of material changes.
10. Contact
BlueWrench HQ, a Brooklyn Bikery company, Brooklyn, NY. Privacy questions: email us.