Privacy Policy

1. Information We Collect

Information you provide to us:

• Account information: When you sign up, we collect your name and email address. If you sign up as a shop, we also collect a business name, business address, BAR Automotive Repair Dealer (ARD) registration number where applicable, and a phone number.
• Repair requests: Vehicle details (year, make, model), a description of the work needed, and any photos you choose to attach.
• Quotes & messages: Quotes that shops send and messages exchanged between customers and shops are stored to deliver them and provide a history within the app.
• Shop subscription billing: If you subscribe to a shop plan, our payment processor (Stripe) collects and processes your payment card details directly. We do not store full card numbers on our servers; we receive only a Stripe customer ID, the last four digits of the card, and the brand.
• Support communications: If you email us, we keep the message so we can respond.

Information collected automatically:

• Coarse location: We collect approximate location (city or region level) to match customers with nearby shops. We do not collect or store precise GPS coordinates.
• Device identifiers: A unique user ID generated by Supabase auth and a device-level identifier used to keep you signed in and route notifications.
• Diagnostic and crash data: If the app crashes or hits an error, we send anonymized diagnostic data to Sentry (our crash reporting provider). This data is not linked to your account.

Information we do not collect:

• We do not collect customer payment, credit card, or banking information. All payment between customer and shop happens off-platform, in person.
• We do not collect government IDs, Social Security numbers, or other sensitive identifiers.
• We do not access your contacts, calendar, microphone, or precise location.

2. How We Use Information

We use the information we collect to:

• Operate the Service — show repair requests to relevant shops, deliver quotes, route messages, surface your job history.
• Authenticate you and keep your account secure.
• Send service-related notifications (a new quote, a new message, an account change).
• Process shop subscription payments via Stripe.
• Diagnose crashes and improve app stability.
• Respond to support requests.
• Comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We share information in the following limited ways:

• Between customers and shops: When you post a request, your first name, vehicle details, and the contents of your request are visible to shops in your area. When a shop sends a quote, their business name, business address, and quote details are visible to you. Messages you exchange are visible only to the two parties in that conversation.
• Service providers: We use third-party providers to operate the app:
  • Supabase — database, authentication, and file storage.
  • Sentry — anonymized crash and error reporting.
  • Stripe — shop subscription billing.
  • Apple Push Notification Service — delivery of push notifications.
  • Email (Gmail / Google Workspace) — support correspondence.
  These providers process data only on our behalf and under contractual confidentiality obligations.
• Legal requirements: We may disclose information if required by law, court order, or to protect rights, safety, or property.
• Business transfers: If FixBid is involved in a merger, acquisition, or asset sale, we will continue to honor this Policy or notify you of any change before your information is transferred under a new policy.

We do not sell your personal information. We do not share your personal information with advertisers, data brokers, or third parties for their own marketing purposes.

4. Data Retention

We retain account information for as long as your account is active. If you delete your account, we delete or anonymize associated information within 30 days, except where we are required to retain it for legal, accounting, fraud-prevention, or dispute-resolution purposes. Messages and job records may be retained in anonymized form for analytical purposes.

5. Your Rights and Choices

You can:

• Access and correct your account information from the Profile tab in the app.
• Delete your account by emailing fixbidsupport@gmail.com from the address on file. We confirm receipt and complete deletion within 30 days.
• Opt out of push notifications in your device Settings.
• Restrict location use by denying or revoking the location permission — without a coarse location we cannot match you with nearby shops.

6. Your California Privacy Rights (CCPA / CPRA)

California residents have the right to:

• Know what personal information we hold about you, the sources, the purposes, and the third parties with whom we share it (Right to Know).
• Request deletion of your personal information (Right to Delete).
• Correct inaccurate information we hold about you.
• Opt out of any sale or sharing of your personal information. We do not sell or share personal information for cross-context behavioral advertising.
• Non-discrimination for exercising any of these rights.

How to submit a request — three ways:

• Public webform: getfixbid.com/privacy/request — no account required.
• Email: fixbidsupport@gmail.com with subject “Privacy request”.
• In-app (logged in): /account/privacy — fastest, no identity verification step needed.

We respond to verified requests within 45 days, as required by California law, and may extend by an additional 45 days if necessary (we'll notify you if so). Most requests are fulfilled within a few business days. We may ask you to confirm your identity by email before fulfilling sensitive requests, per CCPA §1798.140.

7. Children

FixBid is not directed to children under 13, and we do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will delete it. Parents or guardians who believe their child has provided us with personal information should contact us at fixbidsupport@gmail.com.

8. Security

We use industry-standard measures to protect information in transit (HTTPS/TLS) and at rest (database encryption through Supabase). Passwords are hashed. No system is perfectly secure, however, and we cannot guarantee the security of information transmitted to or stored on the Service.

9. Data Breach Notification

If we discover a data breach affecting your personal information, we will notify you in compliance with applicable law, including California Civil Code § 1798.82, which requires notice within 30 days of discovery for California residents.

10. International Users

FixBid is operated from the United States. If you access the Service from outside the U.S., you understand that your information is processed in the U.S., where data-protection laws may differ from those of your country.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy on this page and update the “Last Updated” date. Material changes will be communicated through an in-app notice or email.

12. Contact

For privacy questions, email fixbidsupport@gmail.com.