← Back to Attest Repair

PRIVACY POLICY

Effective date: August 6, 2026

Attest Repair (“Attest Repair,” “we,” “us,” or “our”) provides software that auto and body shops (“Shops”) use to track vehicles, work orders, and repair status, and that lets a Shop’s own clients (“Clients”) look up the status of their vehicle. This Privacy Policy explains what personal information we collect, how it is used, and the choices available to Shops and Clients.

If you are a Client of a Shop, that Shop is the primary controller of your personal information — it decides what to enter into Attest Repair and who at the Shop can see it. Attest Repair acts as a data processor / service provider on the Shop’s behalf for that data. Questions about a Shop’s own privacy practices should be directed to the Shop. See our Terms of Service for the terms governing use of Attest Repair.

1. Information We Collect

Account & staff information (Shops)

When a Shop signs up or invites staff, we collect business details (shop name, slug/URL, phone, email, address, timezone, logo) and staff login information (name, email, phone, role).

Client & vehicle information (entered by Shops)

Shop staff enter information about the Shop’s Clients and their vehicles in order to track repair work, including: Client name, phone number, email, address, and internal notes; and vehicle details such as year, make, model, color, VIN, and license plate. Staff may also add status updates, part orders, notes, and photo/video/audio media documenting the vehicle or repair.

Client portal lookups

When a Client looks up a vehicle’s status, they submit a phone number and/or license plate, which we match against records their Shop has already entered. We do not require a Client to create an account to look up status this way.

Usage & technical data

We automatically collect limited technical data needed to operate the service, such as authentication session data, timestamps, and basic request logs.

2. How We Use Information

  • To provide, maintain, and secure the Attest Repair service.
  • To let Shop staff create, update, and track work orders and communicate vehicle status to Clients.
  • To let Clients look up the status of their own vehicle via a Shop’s portal.
  • To authenticate staff logins and enforce access controls.
  • To respond to support requests and communicate service updates.
  • To detect, investigate, and prevent misuse, fraud, or security incidents.

We do not sell personal information, and we do not use Client or vehicle data entered by Shops for advertising purposes.

3. How Information Is Shared

We share information only as follows:

  • Within a Shop: staff at a given Shop can see the Clients, vehicles, and media associated with that Shop, as controlled by their role.
  • With Clients: a Client can see status, notes, and media that Shop staff have explicitly marked as customer-visible for their own vehicle.
  • Service providers: we use infrastructure providers (currently Supabase, for database, authentication, and file storage) to host and operate the service. These providers process data only on our behalf.
  • Legal reasons: if required to comply with applicable law, legal process, or to protect the rights, property, or safety of Attest Repair, our users, or others.
  • Business transfers: if Attest Repair is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Shops never see another Shop’s data — access is scoped per business at the database level.

4. Data Retention

We retain Shop, Client, and vehicle data for as long as a Shop’s account is active, or as needed to provide the service. A Shop may request deletion of its account and associated data, or deletion of a specific Client or vehicle record, by contacting us or using in-product deletion tools where available. We may retain limited information as required for legal, security, or legitimate business purposes.

5. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit, row-level access controls that scope each Shop’s data to that Shop, and short-lived signed URLs for media files rather than public file access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Choices & Rights

Depending on your location, you may have rights to access, correct, or delete personal information we hold, or to object to or restrict certain processing. Clients should generally start by contacting the Shop that entered their information, as they control the underlying records; Shops and staff can contact us directly at jacobalthenn@gmail.com.

7. Children

Attest Repair is intended for business use by Shops and their adult staff and Clients, and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

8. International Users

Attest Repair is operated from the United States. If you access the service from outside the United States, your information will be processed in the United States, which may have different data protection laws than your jurisdiction.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above. Continued use of Attest Repair after changes take effect constitutes acceptance of the revised Policy.

10. Contact Us

Questions about this Privacy Policy can be sent to jacobalthenn@gmail.com.