Privacy Policy

Last updated: June 3, 2026

Bodywork is an autobody estimate and invoice tool built for independent repair shops. This policy explains what data we collect, how we use it, and what rights you have over it.

1. Data We Collect

When you create an account and use Bodywork, we store:

Account data — your name, email address, and hashed password.
Session data — an authentication token, IP address, and browser user-agent tied to your active session.
Business settings — your shop name, phone, email, address, and default labor and tax rates.
Customer records — names, emails, phone numbers, addresses, and notes you enter for your customers.
Estimates and invoices — vehicle details, repair descriptions, labor hours, parts, pricing, and status history.

We do not collect analytics, track browsing behavior, or use advertising cookies.

2. Why We Collect It

All data is collected solely to provide the Bodywork service — to let you create, manage, and share repair estimates and invoices with your customers. We do not use your data for marketing or sell it to third parties.

3. Cookies

Bodywork sets one cookie: better-auth.session_token. This is a strictly necessary authentication cookie that keeps you signed in. It expires after 30 days or when you sign out. No tracking or advertising cookies are used.

4. Third-Party Services

Bodywork loads the Datastar UI framework from the jsDelivr CDN (cdn.jsdelivr.net). This is a static JavaScript file; no personal data is shared with jsDelivr beyond your IP address making the request. Your estimate and invoice data is stored in a hosted database provided by Turso.

5. Data Retention

Your data is retained for as long as you have an active account. You can delete your account at any time from Account & Privacy settings, which permanently removes all your data from our systems.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

Access — export a copy of all your data as a JSON file from Account & Privacy settings.
Erasure — permanently delete your account and all associated data from Account & Privacy settings.
Portability — your data export is provided in machine-readable JSON format.
Rectification — update your business information in Settings at any time.

To exercise any right or with questions about this policy, contact darrick@darrickdevelops.com.

7. Changes to This Policy

We may update this policy occasionally. The "Last updated" date above will always reflect the most recent revision. Continued use of Bodywork after changes constitutes acceptance of the updated policy.