Privacy Policy

ProperMech ("we," "us," "our") operates the ProperMech and ProperMech Pro mobile apps and propermech.com (the "Service"), which connect drivers with independent car-service providers. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

• Account information — your name, email, phone number, and (for providers) business details, when you sign up with Google, Apple, phone, or email.
• Profile, photos, and videos — your profile picture and any photos or videos you or your provider attach to a service request, estimate line, or job update, including scan-tool photos used by the provider AI tools.
• Provider verification documents — identity, license, insurance, certification, background-check, or business documents a provider chooses or is required to submit. These documents are private and reviewed only by authorized ProperMech administrators; customers see only verification badges or status.
• Vehicle information — the year, make, model, and VIN you enter or scan.
• Car-marketplace information — vehicle listing details and photos, saved-search criteria, ZIP/radius, private offers and replies, marketplace chat, and safety reports.
• Service and order data — the requests, quotes, estimates and approvals, appointment times, status updates, and messages exchanged between customers and providers.
• Service address (mobile jobs) — if you request a "comes to you" job, the address you provide is stored securely and revealed only to the provider who accepts your job — never to providers who are just browsing.
• Provider location while en route (providers only) — when a provider taps Navigate to head to a customer, their approximate position may be shared with that customer only from departure until the provider stops sharing or the job starts, after which it is automatically deleted. Providers control this with the in-app Stop sharing control and their device's location permission; declining it does not block the job.
• Location — if you allow it, your approximate location to help find providers near you. You can decline; the Service still works.
• Device and usage data — basic device identifiers and app activity used to operate and improve the Service.

ProperMech Cars privacy

Public car-market responses contain only approved listing fields such as vehicle specifications, price, description, photos, general location, dealer business name when applicable, and limited trust badges. They do not publish a private seller's name, account identifiers, contact details, full VIN, vehicle-owner identifiers, private offer details, chat access tokens, or saved-search coordinates. Saved-search ZIP/radius and coordinates are used to calculate nearby matches. Offers, replies, and marketplace chat are visible only to participating signed-in accounts or an authorized legacy website session. Reports are shared with our moderation team for safety review.

Google Business Profile reviews (providers)

A provider may choose to connect the Google Business Profile they manage so their Google rating and reviews appear on their ProperMech profile. This is optional, is never required to use the Service, and happens only when the provider signs in with Google and approves the connection on Google's consent screen.

• What we access. With the provider's permission (Google scope business.manage) we read, from Google's Business Profile APIs: the list of Business Profile accounts and locations the signed-in Google account manages (business name, address, phone number, website, Google place ID and Maps link), and for the one location the provider picks, the profile's average star rating, total review count, and the most recent reviews (reviewer display name as shown on Google, star rating, review text, and review dates). Access is read-only: we never post, reply to, edit, or delete reviews, and we never change anything on the Business Profile.
• How we use it. We show the rating, review count, and reviews on the provider's ProperMech profile in both apps and on the provider's propermech.com page, always labeled "Reviews from Google" with a link back to the provider's Google listing. Reviews are shown exactly as Google returns them; we never edit them and never combine Google ratings with ProperMech ratings into one number. The Google rating is one of several inputs to the order providers appear in search results. Our booking assistant may quote the rating and review count to customers ("4.8 stars across 212 Google reviews"). We do not use this data for advertising, do not sell it, and do not use it to train AI models.
• How we store it. The Google access and refresh tokens are stored in a server-only area of our Google Firebase database that the apps cannot read, and are used only to refresh the rating and reviews about once a day. The imported rating, review count, and up to 20 recent reviews are stored on the provider's public profile record so they can be displayed. If a refresh fails repeatedly, the profile is labeled as not current until the next successful refresh.
• Who sees it. The imported rating and reviews are shown to ProperMech users and visitors as part of the provider's public profile, which is the purpose of the connection. We do not share the data or the tokens with any other third party, except the service providers that host the Service (see "Who we share it with").
• Disconnecting and deletion. A provider can disconnect at any time in the ProperMech Pro app (Profile → Google reviews → Disconnect) or by removing ProperMech's access at myaccount.google.com/permissions. On disconnect we revoke and delete the Google tokens immediately; the imported rating and reviews are marked stale, stop being shown within 7 days, and are deleted from our systems within 7 days. If a provider revokes access at Google, the next daily refresh detects it and the same removal happens. Deleting a ProperMech account removes the connection and all imported Google data with it.
• Limited Use. ProperMech's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Until a shop connects its own profile, ProperMech may show the shop's public Google Maps rating and reviews, read live from Google when you view the shop. We store only Google's place identifier for the shop; the ratings and reviews themselves are not stored by ProperMech and are shown with Google Maps attribution.

How we use your information

• To create and manage your account and operate the Service.
• To match customers with the right provider and manage service requests.
• To power the AI Diagnostic Helper and AI Service Writer (for provider mechanics) — see below.
• To communicate with you about your account and your requests.
• To maintain security and improve the apps.

Who we share it with

• Between users — when a job is booked or accepted, the relevant customer and provider see the details needed to complete it (such as name, vehicle, the request, and messages).
• Service providers (processors) — we use Google Firebase (authentication, database, file storage, hosting) and Google Places (address lookup) to run the Service.
• Google Business Profile (providers only, optional) — when a provider connects their Business Profile, we receive their Google rating and reviews from Google's Business Profile APIs under the provider's authorization. See "Google Business Profile reviews (providers)" above.
• Subscriptions — the ProperMech Pro app uses RevenueCat and the applicable Apple App Store or Google Play billing service to manage provider subscriptions and purchase status.
• AI processing — when a provider uses the AI Diagnostic Helper or AI Service Writer, the content submitted (such as scan-tool photos, typed codes, and job notes) is sent to Anthropic (the Claude AI) to generate a diagnosis or estimate.
• Legal — where required by law or to protect rights, property, or safety.
• We do not sell your personal information.

Data retention

We keep your information while your account is active and as needed to provide the Service, resolve disputes, prevent abuse, and meet legal obligations. In-app account deletion removes the account, profile, vehicles, messages, uploads, verification documents, and other personal data. Shared completed-job records may remain for the other party only in minimized, anonymized form. If an account was blocked for safety, non-reversible identifiers and anonymized report evidence may be retained to enforce that decision.

Security

We use industry-standard safeguards, including encryption in transit, to protect your information. No method of transmission or storage is completely secure, but we work to protect your data.

Your choices and rights

• Access, update, or correct your profile information in the app.
• Turn location permission on or off in your device settings.
• Delete your account directly from the Profile screen in either app, or contact us for help or a copy of your data.

Children

The Service is for adults age 18 and older, and we do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us.

Changes to this policy

We may update this policy from time to time. We will post the new effective date here and, for material changes, provide notice in the app.

Contact us

Questions or requests, including data or account deletion: michaelsheaffer018@gmail.com (or support@propermech.com once active).