Privacy Policy for WrenchLane.com
Effective Date: 2025-02-17
Last Updated: 2026-10-09
Version: 1.4
1. Introduction
1.1
WrenchLane AB (org. no. 559450-7393), Engelbrektsgatan 33, 114 32 Stockholm, Sweden, which operates WrenchLane.com ("WrenchLane.com", "Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, platform, and related applications (collectively, the "Services").
1.2
Our Services are designed exclusively for corporate clients and business entities. We do not offer services to private individuals or consumers. Any data collected pertains to business representatives, employees, and corporate accounts.
1.3
By using our Services, you confirm that you are acting on behalf of a business entity and consent to the data practices described in this Privacy Policy. If you do not agree with the terms, you should not use our Services.
1.4
For more details on how we handle data processing, including third-party providers and data retention, refer to our Data Processing Addendum (DPA).
2. Information We Collect
We collect various types of information to provide and improve our Services:
2.1 Business & Contact Data
This includes:
Business name, company registration details, and industry information
Name, corporate email address, phone number, and other contact details of business representatives
Billing details, such as invoicing address, tax ID, and transaction history (note: payment processing is handled by Stripe; we do not store or process credit card details)
2.2 Technical & Usage Data
This includes:
IP address, browser type, and device information
Log files, cookies, and analytics data
Interaction history within the platform
2.3 Vehicle & Diagnostic Data
Data related to vehicle diagnostics, error codes, and maintenance history
Documents and photos you attach to a diagnosis or a chat (for example scan-tool reports and screenshots, work orders, photos of the vehicle or its parts) and the information read from them
Anonymized performance and usage statistics
2.4 Data from Third-Party Integrations
If you choose to connect third-party services (e.g., automotive software or cloud storage providers), we may receive additional data based on your consent.
2.5 YouTube API Services
Our Services use YouTube API Services to provide video-related functionality. When you use features that interact with YouTube, we may collect and process data in accordance with YouTube's data practices. For information about how Google handles your data, please review the Google Privacy Policy.
3. How We Use Your Information
We process your data for the following purposes:
3.1 To Provide and Improve Services:
Process transactions and manage accounts
Enhance functionality and troubleshoot issues
Improve AI-driven vehicle diagnostics and recommendations
3.2 Security & Fraud Prevention:
Detect unauthorized access or misuse
Ensure compliance with security protocols
3.3 Legal & Compliance Obligations:
Comply with applicable laws and regulations
Respond to legal requests or law enforcement inquiries
3.4 Marketing & Communication:
Send service updates, promotions, and newsletters (with opt-out options)
Conduct surveys and gather user feedback
Measure and improve our advertising on Facebook and Instagram, with your consent (see section 4.6)
3.5 Purposes / legal basis
Product analytics. When you are signed in and using the WrenchLane application, we process information about how you use the product (for example, the diagnostics you run and the features you use) on our servers to operate, secure, and improve the service. This server-side processing relies on our legitimate interest in maintaining and improving WrenchLane and is independent of the cookie preferences you set for our website (see the Cookies section). We use privacy-focused analytics providers that host this data within the EU; your IP address is discarded and is not used to locate you.
Advertising measurement. With your consent, we use Meta's advertising tools to measure the results of our ads on Facebook and Instagram and to improve who they are shown to (see section 4.6). This processing relies on your consent, which you can withdraw at any time in our cookie settings (see section 10). Withdrawing your consent does not affect processing that took place before.
4. Data Sharing & Third-Party Disclosure
4.1 Service Providers
We share data with trusted providers who assist in delivering our Services: Amazon Web Services (cloud hosting and storage in Sweden), Google Cloud (AI processing in the European Union), Stripe (payment processing), Customer.io (service and onboarding e-mail), PostHog (product analytics, hosted in the EU), Sentry (error monitoring), licensed vehicle-data providers (vehicle identification by registration number or VIN and technical data) and a web-search provider (search queries performed during a diagnosis). The complete list, with purposes, locations and transfer safeguards, is published in our Data Processing Addendum (DPA) and is updated there when a provider is added or replaced.
4.2 Legal Compliance
We may disclose data when required by law, such as responding to legal processes or government authorities.
4.3 Business Transfers
In case of mergers, acquisitions, or business transfers, user data may be included as part of the transaction, with appropriate safeguards in place.
4.4 Anonymized Data
We may use aggregated, non-identifiable data for research and business insights.
4.5 AI Processing
The diagnostic data you submit (fault codes, vehicle data, problem descriptions, documents and photos you attach, and voice notes) is processed by our AI provider, Google Cloud, in the European Union. Except for web grounding described below, our AI provider does not store prompts or outputs beyond the duration of the request, does not review them for abuse monitoring and does not use them to train its models; these settings have been confirmed to us in writing. Some features check their answers against the public web with Google Search: the chat assistant, fault-code look-ups, repair procedures and verification checks. For these, Google derives search queries from the request and keeps them, together with contextual information, for up to three days to debug its systems, without linking them to you or your company. These searches are not limited to the European Union. In addition, when a diagnosis needs information from the public web, a search query containing the fault codes, the vehicle make, model and year and the problem description is sent to a web-search provider. We do not include your identity, registration numbers or VINs in the queries we build.
4.6 Advertising on Meta Platforms
With your consent, our website and web application use the Meta Pixel, a tool of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland ("Meta"). The Pixel tells Meta which pages you open and, when you create an account, that you signed up. With each of these events it sends the page address, your IP address, information about your browser and device, and the identifiers stored in Meta's cookies (see section 10). When you create an account, our server also reports the sign-up to Meta through Meta's Conversions API, with your e-mail address and account ID in hashed form, your IP address, your browser information and the same cookie identifiers, so that Meta counts the sign-up only once. Meta can match this information with a Facebook or Instagram account you may have, to measure the results of our ads and to improve who they are shown to.
The Pixel does not read what you type. Page addresses that contain text you typed, such as a problem description, or sign-in details are not reported to Meta. Page addresses can contain internal reference numbers, for example of a vehicle model or a diagnosis, but not registration numbers or VINs. We do not use the Meta Pixel in our iOS and Android apps or on pages we provide for our partners.
For collecting this data and sending it to Meta, we and Meta are joint controllers under Article 26 of the GDPR, as agreed in Meta's Controller Addendum. We are responsible for informing you and for asking for your consent. Meta processes the data it receives under its own responsibility, as described in Meta's Privacy Policy. You can exercise your rights regarding this processing with us or with Meta. Meta may transfer the data to Meta Platforms, Inc. in the United States, which is certified under the EU-U.S. Data Privacy Framework.
We also upload the email addresses of registered users of the WrenchLane application to Meta in hashed form (SHA-256), so Meta cannot read the addresses. Meta uses them to create a Custom Audience, which we use to exclude existing users from our ads and to find similar businesses (lookalike audiences). Meta deletes hashes that do not match after the matching is done. The legal basis is our legitimate interest in marketing our service to businesses. You can object at any time by emailing support@wrenchlane.com, and your hashed address will then be removed from the Meta audience. Data may be transferred to the United States under the EU-US Data Privacy Framework.
5. Data Security
We implement robust security measures to protect your data, including:
Encryption of sensitive information
Access control and authentication protocols
Regular security audits and monitoring
6. Data Retention
We retain your data for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Data will be retained for 90 days post-termination, unless an explicit deletion request is made.
Documents and photos you attach are stored encrypted in Sweden. A file you upload but never send with a diagnosis or a chat message is deleted automatically within three days. Deleting a diagnosis or clearing a chat permanently deletes the files it carried; the information read from them stays with that diagnosis or chat until it is deleted under this section.
Anonymized and aggregated data that has been processed before deletion may be retained indefinitely for WrenchLane.com's own service improvement and for the evaluation of its AI features. This data is fully de-identified and cannot be linked to any specific customer. It is never provided to our AI provider for the training of its models. Further details are available in our DPA.
You may opt out of AI training data usage at any time by adjusting your settings in the WrenchLane.com platform or contacting us at support@wrenchlane.com. Opting out will prevent your data from being used in future AI training. Note that it may affect the overall functionality of WrenchLane.com services.
7. Service Availability & Downtime
7.1
WrenchLane.com strives to maintain 99.9% uptime for its services. However, we do not guarantee uninterrupted service and are not liable for outages caused by force majeure events or service disruptions due to our third-party providers (such as Amazon Web Services, Google Cloud or Stripe).
7.2
Customers will be notified in advance regarding planned maintenance or downtime where possible.
8. Your Rights & Choices
8.1 Access & Correction
Business representatives have the right to request access to and correction of corporate data.
8.2 Deletion Requests
You may request the deletion of business-related personal data, subject to legal and operational limitations.
8.3 Data Portability
You can request a copy of business-related data in a machine-readable format.
8.4 Marketing Preferences
You can opt-out of marketing communications at any time. You can withdraw your consent to advertising cookies, including the Meta Pixel, at any time in our cookie settings (see section 10).
To exercise these rights, contact us at support@wrenchlane.com.
9. International Data Transfers
Your data is stored in Sweden and AI processing takes place in the European Union, except for the Google Search grounding described in section 4.5. Some of the providers listed in our DPA are located outside the EU/EEA (for example in the United States); when data is transferred to them we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), and compliance with applicable privacy laws. Meta may transfer the data it receives through its advertising tools to the United States (see section 4.6).
10. Cookies & Tracking Technologies
We use cookies and similar technologies to:
Improve user experience and website performance
Analyze site traffic and user behavior
Provide personalized content and advertisements
Cookies that are not strictly necessary, such as analytics and advertising cookies, are used as set out in our cookie banner. Where the banner asks for your consent, including in the European Economic Area, the United Kingdom and Switzerland, these cookies are set only after you agree. You can change or withdraw your choice at any time: in the web application, open the menu and choose "Privacy & cookie settings"; on our website, use the cookie settings icon. You can also delete cookies in your browser settings.
The advertising cookies include those of the Meta Pixel (section 4.6): _fbp, which identifies your browser, and _fbc, which is set when you arrive from an ad on Facebook or Instagram. Both are kept for up to 90 days.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes through email or prominent notices on our website.
12. Contact Information
For any questions or requests regarding this Privacy Policy, contact us at:
Email: support@wrenchlane.com
Post: WrenchLane AB, Engelbrektsgatan 33, 114 32 Stockholm, Sweden