heyMECANIC

Privacy Policy

Last updated: July 2026

At heyMecanic we are committed to protecting your privacy. This policy explains what data we collect, how we use it, and what your rights are.

1. Data controller

heyMecanic is the controller of personal data collected through the Platform. Contact: contacto@heymecanic.com

2. Data we collect

We collect four categories of data: 1) account data — name, email and billing information of the shop owner; 2) operational data — vehicle, client, work order and quote information uploaded by the shop; 3) usage data — access logs, usage metrics and error reports to improve the service; 4) audio data — voice recordings used to generate work orders, processed in real time and not stored permanently.

3. Purpose of processing

We use your data to: provide the contracted service, process subscription payments, send operational communications (invoices, service notices), improve the Platform through aggregate analysis, and comply with legal obligations.

4. Legal basis

Processing is based on: performance of the subscription contract (account and operational data), your consent (marketing communications, if enabled), and our legitimate interest in improving the service (anonymous/aggregate usage data).

5. Shop client data

Client and vehicle data uploaded by the shop to the Platform is the shop's responsibility as data controller. heyMecanic acts as data processor in these cases. The shop must ensure it has a legal basis for uploading that data.

6. Service providers

We share data only with providers that help us deliver the service: payment processors, cloud infrastructure providers (Supabase/Vercel), and AI services for voice transcription (Groq) and assistance (Anthropic). All are subject to confidentiality agreements and may not use the data for their own purposes.

7. International transfers

Some providers operate outside Uruguay. In those cases, we require appropriate contractual safeguards (standard contractual clauses or equivalent) to protect your data in accordance with Law 18.331.

8. Data retention

We retain account data while the subscription is active and for up to 12 months after cancellation (unless a longer period is legally required). Operational data (work orders, etc.) is deleted 12 months after cancellation. Audio data is deleted after transcription is complete.

9. Your rights

Under Law 18.331 (Uruguay) and applicable regulations, you have the right to: access your data, rectify inaccurate data, request deletion, object to certain processing, and port your data. To exercise these rights write to contacto@heymecanic.com. We respond within 30 days.

10. Security

We implement technical and organizational measures to protect your data: encryption in transit (TLS), role-based access control, strong authentication, and periodic audits. No system is 100% secure; in the event of a security incident affecting your data we will notify you as required by applicable law.

11. Cookies

We use strictly necessary first-party cookies for functionality (session, language and currency preferences, visual theme). We do not use third-party advertising cookies. You can configure your browser to block cookies, though some features may be affected.

12. Changes to this policy

We may update this policy with 15 days' prior notice by email. The current version will always be available at heymecanic.com/privacidad.

Contact

Privacy questions: contacto@heymecanic.com