Privacy Policy

ReconXchange is an automotive reconditioning marketplace. We connect customers who need cosmetic and reconditioning work — detailing, paint correction, dent repair, wheel repair, glass repair, interior repair, and related services — with independent providers and technicians (“Pros”) who perform that work.

This policy applies to everyone who visits our website, creates an account as a customer or Pro, or otherwise interacts with the ReconXchange marketplace.

We collect information you provide directly and information generated by using the service:

• Name
• Email address
• Phone number, if you provide one
• Account login information (such as your password, stored in hashed form, or your Google or Apple account link)
• Vehicle and service request details (e.g. vehicle make/model or VIN, description of the damage or service needed, and the ZIP code or area you search in)
• Your device location, only if you allow it in your browser — see Section 5
• Photos and descriptions you upload with a service request, quote, or review
• Messages you exchange with a customer or Pro through ReconXchange, and the photos attached to them
• Photos and short videos a Pro adds to a job (for example, before-and-after evidence), which the customer on that booking can see
• Provider profile and application details, where applicable (business information, services offered, coverage area, licensing/insurance information, and credentials)
• Government ID images (such as a driver’s license) and other verification documents a Pro uploads with their application. These are kept in private storage that only that Pro and ReconXchange reviewers can open, are never shown to customers, and are used to review the application
• Details you enter when you book through a Pro’s scheduling link — see Section 8
• Usage, device, and log information (such as browser type, IP address, pages viewed, and timestamps)
• Cookie and online identifiers, and information collected by Google Analytics and Google advertising features, as described in Section 7
• Payment-related information, where applicable — handled by our payment processor, not stored on our own servers in raw form

ReconXchange offers “Sign in with Google” as an optional way to create an account and log in, using Google’s standard authentication service through our backend provider, Supabase. When you choose to sign in with Google, we request only the following, narrow set of Google OAuth scopes:

• openid — to verify your identity with Google
• userinfo.email — your Google account email address
• userinfo.profile — your basic Google profile information (name and profile picture)

Through these scopes, ReconXchange may receive:

• Your Google account identifier
• Your name
• Your email address
• Your profile picture/avatar, if made available by Google

How we use Google user data

We use the Google user data listed above only to create or sign in to your ReconXchange account, identify you as a returning user, maintain account security, personalize your account experience (for example, showing your name and photo in your profile), and communicate with you about your account or marketplace activity.

What we do not do

• We do not use Google Sign-In to access your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google product or service.
• We do not sell Google user data.
• We do not use Google user data received through Google Sign-In for advertising, and we never send it to Google Analytics or any advertising service. (We do use Google Analytics on our website, as described in Section 7; that is separate from Google Sign-In and receives no Google Sign-In data.)
• We do not share Google user data except with the service providers described in Section 8 (How We Share Information) that are necessary to operate authentication, hosting, security, customer support, and the marketplace itself.

Google user data is stored in the same secure account database as the rest of your ReconXchange profile (see Section 12, Security), and is retained and deleted under the same terms described in Sections 10 and 11 of this policy. You can review or revoke ReconXchange’s access to your Google account at any time from your Google Account permissions page.

ReconXchange also offers “Sign in with Apple” as an optional way to create an account and log in. When you use it, Apple shares an email address with us — either your real address or, if you choose Apple’s “Hide My Email,” a private relay address that forwards to you — and, if you allow it, your name. We use them only to create and sign in to your account and to contact you about your account and marketplace activity, and we handle them like the rest of your account information. You can stop using Sign in with Apple with ReconXchange from your Apple Account settings.

To find Pros, we use the area you give us — such as a ZIP code, city, or neighborhood — or, if you allow it when your browser asks, your device’s location. We never read your device’s location without that permission, and you can turn it off at any time in your browser settings.

• When you search for Pros, we use your device location only to find Pros and show how far away they are, and we may send it to Google to turn it into a place name, such as a ZIP code. It is not stored on the service requests you send: a request carries only the area you see on screen.
• When you give the service address for a booking, you can pick it from Google’s address search or use your current location. That address, and the map point it resolves to, is stored on the booking and shared only with the Pro you booked, so they can find the vehicle.
• A Pro’s business location — whether typed or taken from their device — is stored so we can match them with nearby requests. For a Pro who travels to customers, we store it only approximately (to about a kilometer); a fixed shop’s public address is stored exactly.

We use the information we collect to:

• Create and manage accounts, and let you log in
• Match customers with relevant Pros and Pros with relevant requests
• Process service requests, quotes, and bookings
• Communicate with you about requests, bookings, provider applications, and support
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Maintain, operate, and improve the marketplace
• Comply with legal obligations

We use Google Analytics to understand how people use our website. Google Analytics uses first-party cookies (such as _ga) and similar identifiers to collect information such as pages viewed, time on page, referring site, browser and device type, and approximate location derived from your IP address.

Google Analytics Advertising Features

We have enabled the following Google Analytics Advertising Features:

• Google signals — if you are signed in to a Google account and have allowed ad personalization, Google may associate the data Google Analytics collects on our site with your Google account, which enables cross-device reporting and remarketing.
• Remarketing with Google Analytics — so that ads for ReconXchange may be shown to past visitors on other sites across the internet.
• Google Analytics Demographics and Interests Reporting — aggregated reports on the age, gender, and interests of our visitors.

With these features, we and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as Google advertising cookies) or other identifiers together to report on visitor demographics and interests, to measure site usage, and to inform, optimize, and serve ads based on past visits to our website. Google’s use of this data is described in How Google uses information from sites or apps that use its services.

What we never send to Google

• We do not send Google your name, email address, phone number, or any other information that directly identifies you, and we do not send page titles, which can contain names.
• We remove query strings, and the private tokens in invoice and booking links, from every page address before it is sent.
• We do not send your vehicle, service request, message, photo, address, or payment details.
• We do not use Google Analytics data to target advertising based on sensitive categories, such as health, financial status, race or ethnicity, religion, sexual orientation, or other sensitive information.

Your choices

• Turn off Google Analytics and/or the advertising features on this browser from our Your Privacy Choices page. Turning off advertising features opts you out of “sharing” for cross-context behavioral advertising.
• We honor the Global Privacy Control (GPC) browser signal as an opt-out of that sharing: while your browser sends it, advertising features are off.
• Some browsers send a “Do Not Track” signal. There is no common standard for how a website should respond to it, so we do not change our practices when we receive it; we do honor Global Privacy Control, as described above.
• Visitors from the European Economic Area, the United Kingdom, and Switzerland: analytics and advertising cookies are off unless you turn them on from Your Privacy Choices.
• Opt out of personalized ads from Google in Google Ads Settings, or opt out of Google Analytics on all websites with the Google Analytics Opt-out Browser Add-on.
• If Google has associated this data with your Google account, you can view and delete it in Google My Activity.

We share information only as needed to operate the marketplace:

• With the other party to a request or booking — for example, a Pro receives the service request, photos, and vehicle details a customer sends them, and a customer receives the quote, messages, contact information, and job photos and videos a Pro provides, to the extent needed to complete the requested service. Our Terms of Service allow a Pro to use a customer’s information only to respond to their request and to perform and communicate about the job they booked.
• With Google, through Google Analytics and its advertising features, as described in Section 7 — subject to the choices described there.
• With the service providers listed below, who help us operate the platform — limited to what they need to perform that function.
• When required by law, legal process, or to protect the safety, rights, or property of ReconXchange, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to your information.

Booking through a Pro’s scheduling link

A Pro can send their own customers a private scheduling link. If you book through one, you do not need a ReconXchange account. We collect the details you enter — your name, phone number, email address if you give one, vehicle (and its VIN, if you enter or scan one), any photos you add, and, if the Pro is coming to you, the service address (with its map point, when you pick it from Google’s address search or use your current location) — store them with the appointment on that Pro’s ReconXchange calendar, and share them with that Pro so they can schedule, perform, and contact you about the appointment. To access or delete this information, contact us as described in Section 11.

Service providers we use

• Supabase — our database, account authentication, and file storage (including photos, videos, message attachments, and Pro verification documents)
• Vercel — hosting for our website and app, and BotID bot protection on our sign-up and password-reset forms, which checks your browser to tell people apart from automated abuse
• Google — Google Sign-In (Section 3), Google Maps and Places for location search (Section 5), and Google Analytics (Section 7)
• Apple — Sign in with Apple (Section 4)
• Resend — delivering our emails
• Stripe — payment processing, where a payment is taken through ReconXchange
• Sentry — error monitoring, when it is turned on. Error reports carry technical details such as the error, the browser, and the page address; we remove request contents, query strings, cookies, private link tokens, and account identifiers before they are sent
• The U.S. National Highway Traffic Safety Administration (NHTSA) — decoding a VIN you enter into a year, make, and model
• Your browser’s push service (such as Google, Apple, or Mozilla) — delivering push notifications, if you turn them on
• Other hosting and infrastructure providers that run our services

We do not sell personal information for money, and we do not sell Google user data. Some US state laws treat the Google advertising features described in Section 7 as “sharing” for cross-context behavioral advertising; you can opt out of that on our Your Privacy Choices page.

We contact you about your account, requests, and bookings by email, in the app, and — if you turn them on — by push notification. ReconXchange does not send automated or marketing text (SMS) messages and does not run a text-messaging program. If you agree to it when you sign up, we may text you one to one about your account or a job — and, if you are a customer, so may a Pro working on your job. We record that choice with your account.

We keep information only as long as reasonably needed for marketplace operations, account management, legal and tax obligations, dispute resolution, security, and other legitimate business purposes described in this policy. When information is no longer needed for these purposes, we delete it or anonymize it.

You can request deletion of your information at any time — see Section 11 below.

You have choices about your information:

• You may request access to, correction of, or deletion of your personal information by contacting us (below).
• If you signed in with Google, you may disconnect ReconXchange from your Google account at any time from your Google Account permissions page, and/or request that we delete your ReconXchange account and associated data.
• If you signed in with Apple, you may stop using Sign in with Apple with ReconXchange from your Apple Account settings, and/or request that we delete your ReconXchange account and associated data.
• You may update most account information directly from your account settings.
• You may turn off analytics and advertising features, and opt out of sharing for cross-context behavioral advertising, at any time from Your Privacy Choices (see Section 7).

To make a request, email us at support@reconxchange.com. We respond to every request within 30 days, and may need to verify your identity before fulfilling it. Some information may be retained where required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including encrypted connections and access controls on our database and authentication provider. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

ReconXchange is for people 18 and older (see our Terms of Service) and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we do, we will update the “Effective date” at the top of this page. We encourage you to review this policy periodically.

Questions about this Privacy Policy or your information can be directed to:

ReconXchange
Email: support@reconxchange.com
Website: https://reconxchange.com

See also our Terms of Service.