Privacy Policy

Last updated: 17 July 2026

Operator details. MechanoMan is currently in pre-launch. The legal entity operating the service, its registered office and (where applicable) its ICO registration number will be stated here before general availability. Until then, contact us using the details in Contact below.

MechanoMan ("we", "us") is a management app for mobile mechanic businesses. This policy explains what personal data we handle, why, and the rights you have over it. It is written to meet the UK GDPR and the Data Protection Act 2018, and applies to the marketing site, the billing portal, the MechanoMan app and the API behind them.

The two roles we act in

We handle two different kinds of personal data, wearing two different hats:

  • As a controller — data about you and your staff: the account, billing and support data we need to run MechanoMan as a service for your business.
  • As a processor — data about your customers: the names, contact details, vehicles, jobs and invoices your business records in MechanoMan. For that data your business is the controller and we process it only on your instructions (using the app is the instruction).

Data we collect as a controller

  • Account data — your name, email address, role and login credentials (passwords are stored only as salted hashes; passkeys are supported and we never see the private key).
  • Business profile — trading name, address, VAT number, logo and branding you set up.
  • Billing data — your subscription plan, invoices and payment status. Card details go directly to Stripe, our payment provider; we never store card numbers.
  • Support and contact — messages you send us and our replies.
  • Technical logs — IP addresses, device/browser information and security-relevant events (such as logins), kept for keeping accounts safe and diagnosing faults.

Data we process on your behalf

Everything your business records in the app: customer names and contact details, vehicle details and registrations, enquiries, quotes, job records and photos, parts, appointments, invoices and payment records. Each business's data is stored in its own separate database — one database per tenant — so it is never mixed with another business's data.

If your customers use the customer portal (to approve quotes, book appointments or pay invoices), the data they enter there is likewise processed on your behalf.

Why we use it (lawful bases)

  • Contract — providing the service you signed up for, including billing.
  • Legitimate interests — securing the service, preventing abuse, and improving it using aggregate, de-identified usage information.
  • Legal obligation — tax and accounting record-keeping.
  • Consent — anything optional, such as marketing emails; you can withdraw consent at any time.

Who we share it with

  • Stripe — payment processing for your subscription and, if you enable it, for invoices you charge your customers.
  • Email delivery — the provider that sends transactional email (quotes, invoices, reminders) on your behalf.
  • Hosting — the infrastructure provider that runs our servers and databases in the UK/EU.
  • HMRC — only if you connect Making Tax Digital, and only the VAT return data you submit.

We do not sell personal data, and we do not share it with advertisers.

Where it lives and how it's protected

Data is hosted in the UK/EU, encrypted in transit (TLS), and isolated per business at the database level. Access within our team is limited to what is needed to operate and support the service, and sensitive administrative actions are audit-logged.

How long we keep it

Your data is kept while your account is active. When your subscription ends you can export your data; if you ask us to delete your account (or after a wind-down period following closure), your tenant database is deleted. Invoices and other records we must keep for tax purposes are retained for the legally required period (normally six years in the UK) and then deleted.

Your rights

Under the UK GDPR you can ask us for access to, correction of, deletion of, or a portable copy of the personal data we hold about you as a controller — and you can object to or ask us to restrict certain processing. We will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

If you are a customer of a business that uses MechanoMan, that business is the controller of your data — please contact them directly; we will assist them in meeting your request.

Cookies and local storage

The app and portals use browser local storage for your login session and for offline caching of your own data. We do not use advertising or cross-site tracking cookies. The marketing pages load the Inter font from Google Fonts, which means your browser requests it from Google's servers; no other third-party resources are loaded.

Changes to this policy

If we make material changes we will notify account owners by email and update the date at the top of this page.

Contact

Questions or requests about this policy: contact us through the billing portal.

← Back to mechanoman · Terms of Service