Privacy Policy

This Privacy Policy describes how PDR Mobile ("PDR Mobile", "we", "us", or "our") collects, uses, and shares information when you use our web application, mobile applications, and related services (collectively, the "Service"). PDR Mobile is a business management tool designed for paintless dent repair (PDR) professionals — including estimating, customer and location management, photo documentation, and AI-assisted panel scanning.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account information

When you register, we collect your name, email address, and password. We may also collect business information such as your shop name, address, phone number, and tax identifiers you choose to enter into your profile.

Business data you enter

The Service stores data you create as part of operating your business, including customers, vehicle locations, estimates, invoices, line items, panel photos, panel scans, team members, commissions, and rate matrices. This data is associated with your account and visible only to members of your account unless you explicitly send it (for example, emailing an estimate to an insurance carrier).

Payment information

Subscription billing is processed by Stripe. When you subscribe, payment card details are collected and stored by Stripe under their security and privacy practices — we do not store full card numbers on our servers. We retain billing metadata such as subscription status, plan, seat counts, billing cycle, invoice history, and the last four digits of your card.

Photos and panel scans

Photos you attach to estimates, invoices, and panel-level documentation are stored in our cloud storage. If you use the iScan feature (where available), panel images are sent to our AI inference partner (Tractable) to detect and size dents; results are returned to your account. Photos are only accessible to members of your account.

Authentication providers

If you sign in with Google or Apple, we receive your email address and basic profile information from that provider to identify your account. We do not receive your password and do not access other data from those accounts.

Device and usage information

We collect technical information when you use the Service, including IP address, browser type, operating system, device identifiers, app version, pages or screens viewed, and errors encountered. This is used for security, debugging, and product improvement.

Push notifications and email

With your permission, mobile devices may receive push notifications (for example, when a commission is recorded). We also send service-related emails such as account verification, password resets, billing receipts, and important account changes. You cannot opt out of essential service emails while your account is active.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate your account and protect against unauthorized access;
• Process subscription payments and manage billing;
• Generate estimates, invoices, and PDF documents on your behalf;
• Run AI panel-scan analysis through our inference partner;
• Send transactional and service-related emails and notifications;
• Diagnose problems, monitor reliability, and improve performance;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not display third-party advertising in the Service, and we do not share your data with ad networks.

3. How We Share Information

Within your account

Other members of the same PDR Mobile account (technicians, staff, owners) can see business data created within that account, subject to role-based permissions you configure.

Service providers

We share limited information with third-party providers strictly to operate the Service:

• Stripe — subscription billing and payment processing.
• Tractable — AI panel-scan damage detection (iScan, where available).
• Cloud hosting — application servers, databases, and file storage.
• Email and push delivery — transactional email and mobile push services.
• Error and performance monitoring — diagnostic logging and crash reporting.

These providers are bound by contracts that limit their use of your information to the services they provide to us.

When you send

When you choose to email an estimate to a customer or insurance carrier, the contents of that email and any attached PDF are transmitted to the recipient you specify. We do not send communications on your behalf without your action.

Legal and safety

We may disclose information if required by law, subpoena, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, the safety of users, or to investigate fraud or abuse.

Business transfers

If PDR Mobile is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. Storage and Security

Your information is stored on cloud infrastructure located in the United States. We use commercially reasonable safeguards including encryption in transit (HTTPS), encryption at rest, role-based access controls, and audit logging. However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

You are responsible for keeping your password confidential and for activity that occurs under your account. Notify us immediately of any suspected unauthorized access.

5. Data Retention

We retain your account and business data for as long as your account is active. After cancellation, we may retain data for a commercially reasonable period for backup, audit, tax, and legal compliance purposes, after which it will be deleted or anonymized. Billing records may be retained longer where required by law.

6. Your Choices and Rights

• Access and update — view and edit your profile and business data from within the Service at any time.
• Export — request a copy of your account data by contacting support.
• Deletion — request deletion of your account and associated data, subject to retention limits described above.
• Marketing communications — we do not send marketing emails by default; if we add them in the future, you may opt out at any time.

Depending on your jurisdiction (for example, if you reside in California or the European Economic Area), you may have additional rights regarding access, correction, deletion, portability, or restriction of processing. Contact us using the details below to exercise these rights.

7. Cookies and Local Storage

We use cookies and browser local storage to keep you signed in, remember preferences such as theme, and detect security issues such as session hijacking. We do not use cookies for cross-site advertising. You can disable cookies in your browser, but the Service may not function correctly without them.

8. Children

The Service is intended for business use by adults. It is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International Users

If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer and processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through an in-app notice before the changes take effect. Your continued use of the Service after changes become effective constitutes your acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or our handling of your information, please contact us through our support page.