Legal
Privacy Policy
Effective October 3, 2026
This Privacy Policy explains how MechSure collects, uses, stores, and shares information when you use our website, Service Passport, document-review services, and related features.
Request MechSure account deletion
1. Information we collect
Account and profile information, such as your name, email address, optional mobile number, sign-in provider, preferences, and account settings.
Vehicle and service information, such as year, make, model, VIN, license plate, mileage, maintenance history, fuel records, repair details, shop information, costs, and notes.
Documents and content you provide, including estimates, invoices, receipts, inspection reports, photographs, messages, and other files submitted for a review or saved in your Service Passport.
Transaction and communication information, including purchase status, subscription information, support requests, email delivery status, and text-message consent. Payment-card details are handled by our payment provider rather than stored by MechSure.
Technical and security information, such as IP address, browser and device information, session activity, timestamps, and security or audit events. We also use cookies and local storage where needed for sign-in, security, and saved preferences.
2. How we use information
We use information to provide and maintain MechSure; authenticate accounts; organize vehicle records; review repair documents; generate reports; process payments; deliver requested email or text messages; support sharing and vehicle transfers; prevent fraud and abuse; troubleshoot and improve the service; and comply with legal obligations.
When a feature uses automated assistance, submitted documents and related instructions may be processed to extract information or help prepare a draft. Automated output is reviewed as described in the service and is not used to make decisions about eligibility for credit, employment, insurance, housing, or another legally significant purpose.
3. Sign-in information
If you sign in with Google or Microsoft, we receive the basic account information needed to authenticate you, such as your account identifier, name, and email address. MechSure uses Google sign-in data only to provide and secure account access and does not use it for advertising.
MechSure's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
4. How we share information
We share information only as needed with service providers that help operate MechSure, such as hosting and storage providers, authentication providers, payment processors, email and SMS delivery providers, and document-processing or artificial-intelligence providers. These providers may process information only to perform services for us and are subject to their own contractual and legal obligations.
Current providers may include Cloudflare for application hosting, databases, and file storage; Supabase and the selected identity provider for sign-in; Stripe for payments; Resend for email; Twilio for text messages; and OpenAI for document extraction or drafting when that feature is used.
We may also share information with a person you direct us to share it with, such as a buyer or garage member; with professional reviewers working on your request; when required by law or necessary to protect rights and safety; or in connection with a merger, financing, acquisition, or sale of assets subject to appropriate safeguards.
MechSure does not sell personal information or share it for cross-context behavioral advertising.
5. Vehicle-history sharing
A vehicle's records remain private unless you add another garage member, create a MechSure Report link, approve a vehicle transfer, or otherwise direct us to share them. You control which supported records and attachments are included. Review attachments for names, addresses, phone numbers, payment information, or other personal details before sharing.
Time-limited sharing and transfer links may remain available until they expire or you disable them. Current MechSure Report links can remain active for up to 60 days.
6. Retention and deletion
We keep account and service information while your account is active and as reasonably necessary to provide the service, maintain business and security records, resolve disputes, enforce agreements, and meet legal obligations.
When you remove a vehicle from My Garage, it is normally placed in Recently Removed for 30 days before its associated garage records and stored files are permanently deleted. You may restore it during that period or permanently delete it sooner. Deletion may be delayed when a legal, security, payment, fraud-prevention, or other legitimate retention obligation applies.
Some information may remain in backups or legally required business records for a limited period. Deidentified or aggregated information that cannot reasonably identify you may be retained longer.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, private file delivery, expiring links, and security logging. No system is completely secure, so we cannot guarantee absolute security. Keep your sign-in method secure and contact us promptly if you suspect unauthorized access.
8. Your choices and rights
You can update many profile, vehicle, and service-record details in MechSure. You can remove vehicles and records using the available account controls, disable active sharing links, withdraw optional SMS consent, and disconnect MechSure from your Google or Microsoft account settings.
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing. To make a privacy request, email support@mechsure.com. We may need to verify your identity before completing a request.
9. Children's privacy
MechSure is intended for adults and is not directed to children under 13. Our Terms require account holders and people submitting materials to be at least 18 years old. If you believe a child provided personal information to us, contact us so we can investigate and take appropriate action.
10. Changes to this policy
We may update this Privacy Policy as MechSure changes. We will update the effective date and provide additional notice when required by law. Your continued use of the service after an update is subject to the revised policy where permitted by law.
11. Contact
Questions or privacy requests may be sent to support@mechsure.com.