Privacy Policy

1. Data We Collect

We collect the following categories of information when you use wreckin.parts:

Account Information

• Name, email address, and phone number
• Business name, address, and contact details
• Account credentials (passwords are hashed and never stored in plain text)

Inventory Data

• Vehicle and part information (make, model, year, condition, pricing)
• Photographs of vehicles and parts
• VIN numbers and title information

Voice and Audio Data

• Voice recordings submitted through Squawk Box (audio broadcasts)
• AI-generated transcriptions of voice recordings
• Structured data extracted from transcriptions (part requests, vehicle details)

Location Data

• Yard address and GPS coordinates (used for mapping and proximity search)
• GPS mapping data within your yard for vehicle location tracking, including boundary polygons, zones, and pin locations
• GPS position data recorded during walk recorder sessions (used to create yard boundary maps)
• Device GPS data used during wayfinding navigation within yards

SMS and Phone Number Data

• Phone number (when voluntarily provided by you)
• SMS opt-in status and notification preferences
• Message delivery logs (recipient, timestamp, delivery status) retained for 90 days

We collect your phone number to send deal notifications, Squawk Box alerts, Radar Hit notifications, and account verification codes. Phone numbers are retained for as long as your account is active. Message delivery logs are retained for 90 days for troubleshooting and compliance purposes and are then automatically deleted.

SMS messages are delivered via a third-party SMS delivery service, which processes your phone number solely for the purpose of message delivery. We do not share your phone number with any other third parties. We do not use your phone number for marketing purposes unless you have explicitly opted in to receive promotional SMS messages.

You can opt out of SMS notifications at any time by replying STOP to any message or by updating your notification preferences in your account settings.

Usage Data

• Pages visited and features used
• Browser type, device information, and IP address
• Referral sources and session duration

2. How We Use Your Data

We use your information to:

• Provide the Service: Operate the platform, process transactions, display your inventory listings, and enable communication between buyers and yards.
• Improve the Platform: Analyze usage patterns to improve features, performance, and user experience.
• Analytics: Generate aggregate, anonymized analytics to understand how the platform is used and identify areas for improvement.
• Communication: Send service-related notifications, billing reminders, and platform updates. We do not sell your information or send unsolicited marketing emails.
• Security: Detect and prevent fraud, abuse, and unauthorized access.

3. AI Processing

wreckin.parts uses artificial intelligence to assist with several platform features. All AI processing runs locally on our infrastructure. Your data is never sent to external AI services or third-party machine learning providers.

Image Processing

When you upload photographs of parts or vehicles, AI models running on our servers may analyze those images to identify parts, suggest categories, and generate descriptions. Uploaded images are stored on our servers and processed locally. Images are not shared with external AI providers.

Voice Transcription (Radar)

When you record a voice message through Squawk Box, the audio is sent to our Radar transcription service, which runs locally on our infrastructure using speech-to-text AI models. The following processing occurs:

• Your audio recording is transcribed to text using AI speech recognition.
• The transcribed text is analyzed by AI to extract structured part request data (make, model, year, part name).
• Extracted data is matched against inventory across the network to generate Radar Hits.
• Both the original audio file and the generated transcription are stored on our servers.

Voice recordings and transcriptions are not shared with external third parties. They are accessible to other yards on the network only as part of the Squawk Box broadcast functionality you initiated.

Inventory Matching

AI models analyze inventory data and incoming part requests to identify potential matches. This includes comparing text descriptions, part numbers, vehicle compatibility data, and other structured information. All matching is performed on our local infrastructure.

4. Cookies and Tracking

We use cookies and similar technologies to operate the Service. For full details, see our Cookie Policy.

• Session Cookies: Required for authentication and maintaining your logged-in session (powered by NextAuth).
• Preference Storage:Theme preferences and UI settings are stored in your browser's localStorage.
• Analytics: We use Google Analytics (measurement ID: G-3Y4EK5NJTL) to collect anonymized usage data. Google Analytics uses cookies to track sessions and page views.

5. Third-Party Services

We share data with the following third-party services as necessary to operate the platform:

• Stripe:Payment processing. Stripe receives your billing information (name, email, payment method) to process subscription payments. Stripe's privacy policy applies to data they process. We do not store your full credit card number on our servers.
• Google Analytics: Anonymized usage analytics. Google receives anonymized browsing data (pages visited, session duration, device type). No personally identifiable information is intentionally shared with Google Analytics.

We do not sell, rent, or trade your personal information to any third party.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Active Accounts: All data is retained while your subscription is active.
• After Cancellation: Your data is available for export for a minimum of 30 days after account cancellation. After this period, data may be permanently deleted.
• Billing Records: Transaction and billing records may be retained for up to 7 years as required by tax and accounting regulations.
• Analytics Data: Anonymized, aggregate analytics data may be retained indefinitely.
• Voice Recordings: Squawk Box audio files and their AI-generated transcriptions are retained for as long as your account is active and for 30 days after account cancellation.
• AI Processing Data: AI job records, part identifications, and Radar Hit data are retained for as long as your account is active.

7. Your Rights

You have the following rights regarding your data:

• Access: You can request a copy of all personal data we hold about you.
• Correction: You can update or correct your information through your account settings or by contacting us.
• Deletion: You can request deletion of your account and associated data. We will process deletion requests within 30 days, subject to legal retention requirements.
• Export: You can export your inventory data, vehicle records, and other content at any time through the platform.
• Opt-Out: You can opt out of non-essential cookies and analytics tracking. See our Cookie Policy for instructions.

To exercise any of these rights, contact us at justin@reiners.io.

8. CCPA / GDPR

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• The right to access, rectify, or erase your personal data.
• The right to restrict or object to processing.
• The right to data portability.
• The right to lodge a complaint with a supervisory authority.

Our legal basis for processing your data is the performance of our contract with you (providing the Service) and our legitimate business interests (improving the platform and ensuring security).

9. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encrypted storage, secure authentication, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us: