Privacy Policy

This Privacy Policy explains how M&R Legacy Ventures LLC, doing business as PitWrench (“we,” “us,” or “our”), collects, uses, and shares your personal information when you use PitWrench (“the Services”). If you don’t agree with this policy, please don’t use the Services.

1. What information we collect

When you submit a bike for an inspection report, we collect: your email address; the listing URL, listing text, and asking price you provide; your general region and ZIP code; details you enter about the bike (make, model, year, claimed hours, service history, mods, crash history, etc.); and the photos you upload of the bike.

When you pay, our payment processor Stripe collects your card details directly through their own secure checkout page — we never see or store your card number. We do not require a full billing address; Stripe’s standard card-verification process may collect a billing postal code as part of processing the payment.

Separately from anything you submit, our server keeps a basic record of page requests so we can tell how many people are reaching the site. That record does not include your IP address, your name, or your email — see section 11 for exactly what it contains and how it’s de-identified.

We do not knowingly collect sensitive personal information (such as racial or ethnic origin, religious beliefs, health data, or biometric data), and we do not collect information about you from third-party sources.

2. How we use your information

We process your information to: generate and deliver your inspection report; respond to your questions; send you administrative messages about your order (such as a generation failure or refund); process your payment; and detect and prevent fraud or misuse of the Services. We process your information because it’s necessary to fulfill the report you paid for, or with your consent when you contact us directly.

3. Who we share your information with

We share your information only with the service providers that run PitWrench, each under contract and only for the purpose of providing the Services — never for their own independent marketing or resale:

• Anthropic — processes your photos and intake details to generate your report.
• Stripe — processes your $19 payment.
• Supabase — hosts our database and stores your uploaded photos.
• Resend — delivers the email containing your report link.
• Vercel — hosts the PitWrench website and application.

We may also disclose information if required by law, or in connection with a merger, sale, or transfer of our business. We do not sell or share your personal information for advertising purposes, and we have not done so in the past twelve months.

4. Automated processing (AI)

When you submit a bike for an inspection, your listing details, intake answers, and uploaded photos are sent to Anthropic’s Claude AI models, which analyze them to produce your report. This is automated processing — no PitWrench employee reviews your submission before the report is generated.

5. Market data record

We keep a separate structured record of each bike’s stated condition (make, model, year, hours, asking price, region) to improve PitWrench’s market data over time. This record does not include your email address directly, but it is connected internally to your original submission, so it is not fully de-identified.

6. Your report link

We do not use traditional account logins. Your report is accessible via a private, unique link emailed to you — anyone with that link can view your report, so treat it like a password. Don’t share it publicly.

7. How long we keep your information

Your report, intake details, and photos remain in our database so you can revisit your report using its link. If you’d like your data deleted, contact us (below) and we’ll remove it, other than records we’re required to keep for payment or tax purposes.

8. How we keep your information safe

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is 100% secure, so we can’t guarantee absolute security. Transmission of information to and from the Services is at your own risk.

9. Children’s privacy

PitWrench is not directed at children, and we do not knowingly collect information from anyone under 18. By using the Services, you represent that you’re at least 18, or a parent/guardian using it on a minor’s behalf.

10. Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, access or correct it, request deletion, or object to certain processing. For residents of California and other states with similar laws: the information we collect includes identifiers (email address) and commercial information (your $19 transaction and payment status). We do not collect biometric information, precise geolocation, protected classification data, or professional/education history. We do not sell or share personal information, so there’s no opt-out needed for that.

To exercise any of these rights, submit a privacy request or email us directly at legal@pitwrench.com. We’ll verify your identity before acting on a request and respond in accordance with applicable law.

11. Site measurement and Do Not Track

We do not use tracking cookies, advertising pixels, or any third-party analytics service. Nothing is added to the pages you visit for measurement purposes, and no information about you is sent to an analytics vendor.

We do keep a basic first-party record of page requests on our own server, so we can tell how many people reach the site and which link brought them. For each page request we store: the page requested, the referring website, any campaign tag in the link (for example ?utm_source=facebook), the country reported by our host, and whether the request came from a phone or a computer.

We do not store your IP address or your browser’s user-agent string in that record. Instead, we store a one-way cryptographic hash that combines them with the current date and a private key. This lets us count two visits on the same day as one person without being able to identify who that person is, and because the date is part of the hash, the value changes every 24 hours — there is no way for us to recognize a returning visitor across days, and no way to reverse the value back to an IP address. This record is never linked to your email address, your order, or your report.

Most browsers offer a Do Not Track (DNT) signal. There’s no finalized industry standard for how sites should respond to it, so — like most sites — we don’t currently respond to DNT signals. See our Terms of Service for more on how the Services work.

12. Changes to this policy

We may update this policy from time to time. We’ll update the date at the top of this page when we do, and post material changes prominently.

13. Contact us

Questions, requests, or complaints about this policy: email legal@pitwrench.com, or write to us at:

M&R Legacy Ventures LLC
718 Griffin Ave, #292
Enumclaw, WA 98022
United States