Privacy Policy

1. Who we are

Mechanix is a lead-capture and website service for independent auto mechanics, operated by Kumo(a sole proprietorship, Utah, USA). References to "we," "us," or "Mechanix" in this policy refer to Kumo operating the Mechanix service. Contact: mechanix@kumos.dev.

2. Two kinds of users

Mechanix has two distinct kinds of people who use it, and we collect different things from each:

Mechanic clients — auto-repair operators who pay Mechanix for a hosted website, lead-capture infrastructure, and SMS/email lead notifications.

End customers— drivers and vehicle owners who arrive at a mechanic's Mechanix-hosted site, scan a Mechanix QR code, or submit a quote-request form.

3. What we collect from mechanic clients

Business name, owner name, email, mobile phone number, services offered, service area, biography and photo, language preference, and payment details (collected and processed by Stripe — we never see or store your card number).

4. What we collect from end customers

Contact info you submit(only if you fill out the lead-request form on a mechanic's page): name, phone number, email (optional), and a short description of the job.

Technical info we collect automatically when you visit any Mechanix-hosted page or scan a Mechanix QR code:

• IP address
• Device type, operating system, and browser (user-agent string)
• Browser language preference
• Approximate location (city / region / country) derived from your IP
• The QR code identifier you scanned, if any
• Where you arrived from (the referring URL)
• Date and time of your visit

We do not use cookies for advertising tracking, and we do not attempt to fingerprint you across other sites.

5. How we use your information

Contact info you submit is forwarded directly to the mechanic you reached out to, so they can call or text you back. The mechanic is responsible for their handling of your information from that point. Mechanix retains a copy for support, dispute resolution, and to keep an audit trail.

Technical and scan information is used only to:

• Show the mechanic when their QR codes are being scanned and from where
• Detect fraud and abuse (e.g. blocking obvious bot traffic)
• Operate, secure, and improve the Mechanix service

We do not use this data for advertising, and we do not sell, rent, share, or otherwise disclose it to third parties or affiliates for marketing or promotional purposes.

6. Email lead-alert program (mechanic clients only)

Program name: Mechanix Lead Alerts.

Who receives notifications: paying mechanic clients only.

What we send:transactional email notifications when a new customer lead is captured on the mechanic's hosted website. A typical email contains the customer's name, phone number, optional email, and short description of the job.

How mechanics opt in: by signing up for a paid Mechanix subscription at mechanix.kumos.dev. The Stripe Checkout consent text explicitly authorizes Mechanix to send lead notifications by email at the address provided. Lead alerts are core to the Service — turning them off effectively ends its value.

Frequency: varies with inbound customer activity.

How to opt out: email mechanix@kumos.dev to disable lead notifications or close your account.

SMS notifications: not currently part of the Service. If we add an SMS channel later, we will obtain separate, explicit consent from each mechanic before enabling SMS for their account, and update this policy accordingly.

7. Service providers

We rely on a small number of operational service providers to deliver the Mechanix product. They process data on our behalf, only to perform the function we've hired them for, and are contractually prohibited from using it for their own marketing.

• Stripe — payment processing for mechanic-client subscriptions.
• Resend — delivering transactional email (lead alerts and account messages).
• Supabase — database hosting.
• Vercel — website hosting and basic traffic analytics.

These providers are not third-party marketers, affiliates, or data buyers. We do not allow them to use Mechanix end-user data — including SMS opt-in data, phone numbers, or consent records — for their own promotional purposes.

8. Your choices & rights

Email mechanix@kumos.dev for any of the following:

• Access: a copy of the data we hold about you.
• Correction: fix anything inaccurate.
• Deletion: remove your records entirely. Subject DELETE.
• SMS opt-out: reply STOP to any message, or email us.

We respond to all requests within 30 days. There's no fee, and we won't penalize you for asking.

9. Data retention

Mechanic account data is retained for the lifetime of the account and for up to 12 months after cancellation for billing and tax records, then deleted. End-customer lead-form data is retained for 24 months to enable the mechanic to follow up and to support dispute resolution. Aggregate non-identifying operational metrics may be retained longer for service-improvement purposes.

10. Security

We use industry-standard encryption in transit (TLS) and at rest for all data, row-level security on our database, and restrict administrative access to the service operator. No system is perfectly secure; in the event of a breach affecting your data, we will notify you promptly.

11. Children

Mechanix is a B2B service for adult mechanic business owners and the adult customers of those mechanics. We do not knowingly collect information from children under 13.

12. Changes to this policy

We'll post updates to this page and change the "last updated" date. Material changes that affect how we handle your data — including any change to SMS-program practices — will be communicated by email to mechanic clients before they take effect.