Privacy Policy

Our role depends on the data

• When we provide the Service to a repair business (a “Shop”) and handle information about that Shop’s own customers, the Shop decides what data to collect and why. In that case the Shop is the controller/business and Benchry acts as a processor/service provider on the Shop’s behalf. If you are a customer of a Shop, please direct privacy requests to that Shop.
• For information about Shops and their staff (our direct users) and visitors to our websites, Benchry is the controller.

1. Information we collect

• Account and business information: name, business name, email, phone, login credentials (stored hashed), subscription plan, and billing details processed by our payment processor.
• Shop-entered data: information a Shop enters to run its business, which may include its customers’ names, contact details, device information, repair notes, estimates, invoices, attachments/photos, and payment records (we do not store full card numbers — see Payments).
• Usage and device data: log data, IP address, browser/device type, pages viewed, and actions taken, used to operate and secure the Service.
• Cookies: strictly necessary cookies (for example, to keep you signed in). See “Cookies” below.
• Communications: messages you send us (e.g., support requests, demo or signup forms).

2. How we use information

• To provide, operate, maintain, and secure the Service;
• To process subscriptions and payments;
• To send service-related communications (e.g., account, billing, and security notices);
• To provide support and respond to inquiries;
• To monitor, troubleshoot, and improve the Service, including error monitoring;
• To detect, prevent, and address fraud, abuse, or security issues; and
• To comply with legal obligations and enforce our Terms.

We do not sell personal information.

3. Payments

Payments are handled by third-party processors (such as Stripe, Square, Clover, and PayPal). When a payment is made, card data is collected and processed by the processor under its own privacy and PCI-DSS security practices. Benchry stores transaction metadata (such as amount, status, last four digits, card brand, and processor references) but not full card numbers.

4. How we share information

• Service providers / sub-processors that help us run the Service, under contractual confidentiality and data-protection obligations, including: cloud hosting and infrastructure providers, payment processors (Stripe, Square, Clover, and PayPal), email delivery (e.g., SendGrid), and error-monitoring (e.g., Sentry).
• A Shop’s own communications: when a Shop uses the Service to email its customers, those messages are sent through the Shop’s configured email provider on the Shop’s behalf.
• Legal and safety: when required by law, to respond to legal process, or to protect rights, safety, and the integrity of the Service.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. Cookies

We use cookies and similar technologies that are necessary to provide the Service, primarily for authentication and session management. We do not use them for third-party advertising. You can control cookies through your browser, but disabling necessary cookies may break sign-in.

6. Data retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Shop-entered data is retained while the Shop’s account is active and for a reasonable period afterward, after which it may be deleted. A Shop may request export or deletion as described below.

7. Security

We take reasonable technical and organizational measures to protect information, including encryption in transit, hashed passwords, role-based access controls, and tenant isolation. See our Security Policy for more detail. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Our direct users may exercise these by contacting [email protected]. If you are a customer of a Shop, contact that Shop, which controls your data; we will assist the Shop as its service provider. You may also opt out of non-essential communications.

9. Children’s privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

10. International users

The Service is operated in the United States. If you access it from elsewhere, you understand your information will be processed in the United States.

11. Changes

We may update this Policy from time to time. Material changes will be communicated by reasonable means (e.g., email or in-app notice), and the “Effective date” above will be updated.

12. Contact

Omniral Media LLC — [email protected]