Privacy policy

This page explains what information Coachwright collects, why, who else sees it, how long we keep it, and what you can do about it.

Coachwright is run by Coachwright LLC, a Texas company. "We" and "us" on this page mean Coachwright LLC. We serve customers in the United States only, and your data is stored there.

1. Who this policy is for

Three kinds of people use Coachwright, and we hold different things about each.

• Shop owners and staff. You have an account in the shop console. Section 2 is about you.
• A shop's customers. Your car is at a shop that uses Coachwright, and the shop may have invited you to a customer portal. Section 3 is about you.
• Visitors. You are reading a shop's public showcase, or you filled in a contact form. Section 4 is about you.

Sections 5 onward apply to everyone.

2. Shop owners and staff

Your account. Your name, email address, phone number, job title and role, all entered by you or by the owner who invited you. Sign-in is handled by Clerk, a login service. We never see your password.

Your work. Everything you and your colleagues put into the app: builds, tasks, time logs, notes, photos, invoices, change orders, and the shop's settings. If the owner records pay rates and hours, those are stored too. All of this belongs to the shop, and the shop owner controls it.

Your location when you clock in and out. If your shop uses the punch clock, your phone asks for permission to share your location when you clock in or out. We store the coordinates and how accurate they were, and we check them against the shop's geofence. Location is captured only at the moment you punch, never in the background. The shop owner can see where each punch happened. You can refuse the permission, and the punch is then recorded without a location and flagged for the owner to review.

Your device. If you turn on push notifications, your browser gives us a subscription that we use to send them. You can turn it off in your browser or in the app at any time.

How you use the app. In the shop console we record your session: the screens you see and what you type, except passwords. The recording is tied to your name and email. We use it to reproduce problems you report and to see where the app is confusing. Recordings are kept for 30 days. We do not record the customer portal or any public page.

3. A shop's customers

What the shop enters about you. Your name, contact details, billing address, your vehicles, the work being done, photos, invoices, change orders, and notes the shop writes for its own use. The shop puts this in and decides what happens to it. We store and process it on the shop's behalf.

Your portal account. If the shop invites you to the customer portal, you create a login with Clerk, and we link it to your customer record. In the portal you can see your builds, invoices and change orders, and approve change orders. We do not record your portal sessions.

Emails about your build. The shop can send you invoices, change orders and progress updates by email through Coachwright. The shop can turn update emails off for you, and you can ask the shop to.

If you want your information corrected or deleted, ask the shop. The shop is responsible for your data. If you write to us instead, we will pass your request to the shop and help them carry it out. We never use your information for our own marketing, and we never share it with anyone except the services in section 6.

4. Visitors

Public showcases. Shops publish pages about their work, sometimes on their own domain. When you view one we see the ordinary things any website sees: your IP address, browser, and the pages you visit. We do not build a profile of you and we do not track you across other sites.

Contact forms. If you send a shop an inquiry from its showcase, we store your name, contact details, message and vehicle details, and pass them to the shop. If you leave your details at a car show, we store your name, shop name, contact details and message for our own follow-up. Both forms also record your IP address, which we use only to block spam and abuse. We never show it to shops, and we delete it after 90 days. Cloudflare checks the form for bots.

Documentation. Reading our docs collects nothing beyond what any web page does.

5. Cookies and analytics

We use cookies for two things:

• Keeping you signed in. Clerk sets a session cookie when you sign in. Without it the app cannot know who you are.
• Understanding how the app is used. PostHog, an analytics service, sets a cookie so it can tell one visit from the next. In the shop console it also records sessions, as described in section 2. On public pages it counts page views without identifying you.

We do not use advertising cookies, and we do not sell or share your information for advertising.

6. Who else sees your data

We use a small number of services to run Coachwright. Each one sees only what it needs for its job, and each is bound by its own contract with us not to use your data for anything else.

Service	What it does	What it sees
Clerk	Sign-in and accounts	Your name, email, phone, and login activity
Railway	Hosts the app and the database	Everything stored in the app
Cloudflare	Stores files, serves custom domains, checks forms for bots	Photos and documents; your IP when you view a showcase or submit a form
Stripe	Billing for shops	The shop's billing contact, payment method and invoices
PostHog	Usage analytics and console session replay	What you do in the app, tied to your name and email in the console
Sentry	Reports errors in the app	Technical details of an error, including who was signed in
Axiom	Stores our server logs	Request logs with your user id, never what you typed
Resend	Sends our emails	The addresses and content of emails we send
CARTO	Draws the maps in the console	Your IP when a map loads
Apple, Google, Mozilla	Deliver push notifications	The notification text, through your browser's push service

All of these are US companies or store our data in the US.

Our support staff. When we need to look inside a shop to help with a problem, we open a support session. It is read-only unless the shop has asked us to change something, it expires on its own, it requires a written reason, and every request made during it is logged. We do not browse shops otherwise.

When the law requires it. We disclose information if a court order or the law requires us to, and we will tell the shop unless we are legally barred from doing so.

If Coachwright is sold. Your data would transfer to the new owner under this policy, and you would be told.

7. Emails and notifications

Emails the app sends are about your account or your work: sign-in links, invoices, change orders, progress updates, payment reminders, and alerts about your subscription. You cannot opt out of these while you use the service, because the service does not work without them.

Product news. We may email shop owners about new features and changes to Coachwright. Every such email has an unsubscribe link. We never send marketing email to a shop's customers.

Push notifications are off until you turn them on, and you can turn them off at any time.

8. How long we keep it

Information	How long
Everything in an active shop	As long as the shop uses Coachwright
A shop whose plan ended	90 days read-only so the owner can export it, then kept until the owner deletes the shop, so they can come back
A shop the owner deleted	Everything, data and files, is removed within 30 days
Database backups	Up to 30 days
IP addresses from contact forms	90 days
Console session recordings	30 days
Server logs and error reports	90 days
Billing records	As long as tax law requires, typically 7 years

Deleting a shop is a separate action from cancelling. Cancelling stops the billing. Deleting removes the data. Only the owner can delete a shop.

9. Your choices

Shop owners can export everything in the shop as a zip file from Settings, correct any record, and delete the whole shop from Settings.

Staff can edit their own profile. To correct or remove anything else, ask your shop owner, since the shop controls its data. If you leave a shop, the owner deactivates your account and your name stays on the records you worked on, the way it would on paper.

A shop's customers ask the shop, as described in section 3.

Everyone can refuse location sharing, turn off push notifications, unsubscribe from product news, and clear or block cookies in their browser. Blocking the sign-in cookie means you cannot sign in.

Asking us directly. If you want to know what we hold about you, have it corrected, or have it deleted, email us at the address in section 12. We answer within 30 days. We will need to confirm who you are before we act on a request. Some US states give residents specific rights over their personal information. If one applies to you, we honour it through the same address.

10. Security

Data travels between you and Coachwright encrypted, and the services in section 6 store it encrypted. Each shop's data is kept apart from every other shop's by rules enforced in the database itself. We do not store card or bank account numbers. Stripe holds those, and we see only the last digits. Passwords are held by Clerk, not by us.

No system is perfectly secure. If we learn of a breach that affects you, we will tell the affected shops promptly and say what happened and what we are doing about it.

11. Children

Coachwright is for businesses and their customers. Nobody under 18 should have an account, and we do not knowingly collect information from anyone under 18. If you think we have, email us and we will delete it.

12. Changes to this policy

We may update this page. If a change affects what we collect or who we share it with, we tell shop owners before it takes effect, and the date at the top changes.

13. How to reach us

Coachwright LLC 5900 Balcones Drive, Suite 100 Austin, TX 78731

Email: [email protected] Phone: +1 (346) 516-6529