Privacy Policy

SideWRK, a product of Wilderness LLC, a California limited liability company ("SideWRK", "we", "us"), provides software that helps tradespeople across 42 trades run side work — customers, the vehicles or job sites they work on, estimates, invoices, payments, photos, and the documentation that proves what was authorised. This policy explains what we collect, how we use it, and the choices you have. By using SideWRK you agree to this policy.

Who is responsible for the data

Two kinds of data flow through SideWRK:

• Your account data — we are responsible for the information you give us to run your SideWRK account (e.g., your email and business profile).
• Your customers' data — the customer names, phone numbers, emails, vehicles, photos, notes, and job records you enter belong to your business. You control that data; we process it on your behalf to provide the service. You are responsible for having the right to collect it and for how you use it.

Information we collect

• Account & profile: email address, and the business profile you add (business name, owner name, address, phone, registration/ARD number, logo, default labor rate).
• Business records you enter: customers, vehicles (incl. VINs), jobs, line items, notes, odometer/tire readings, photos and videos, payments, and authorization records.
• Usage analytics: our own event beacon records page and feature usage against a random anonymous identifier — no name, no email, no account data — so we can see which parts of the app people actually use.
• Session recording and heatmaps (Microsoft Clarity): on our marketing pages and the no-signup demo, Microsoft Clarity records how visitors move through a page — scrolling, clicks, and where people get stuck — and aggregates it into heatmaps. It is deliberately switched off everywhere your business runs: not in the app, not on the customer approval page, not on any payment page, and not on your public profile. We do not want a recording of your customer paying you, so we did not put one there. Clarity's own retention is 30 days.
• Advertising measurement (Google Ads): pages we advertise carry Google's conversion tag, which sets a first-party cookie so Google can tell us that an ad click led to a signup or a demo, and which supports remarketing. It fires on marketing pages and on signup — never on a page carrying a customer's job or payment details.
• Technical data: standard server logs (such as IP address and browser type) kept by our infrastructure providers for security and reliability.

We do not knowingly collect more than we need, and we do not sell personal information.

How we use information

• To provide and operate SideWRK (create estimates/invoices, render the customer approval page, send email, look up VINs/recalls, etc.).
• To secure accounts, prevent abuse, and troubleshoot.
• To improve features based on aggregate, de-identified usage.
• To communicate with you about your account and important service or security changes.

Service providers we share data with

We use a small set of trusted providers to run the service. They process data only to provide their service to us:

• Supabase (database, authentication, and file storage; hosted on AWS, US region) — stores your account and business records.
• Cloudflare (web hosting/CDN) — serves the app and the customer estimate pages.
• Resend (email delivery) — sends account emails and the branded estimates/invoices you email to customers.
• NHTSA (U.S. government VIN-decode and recall APIs) — when you scan or look up a VIN, that VIN (and year/make/model) is sent to NHTSA to return vehicle details and open recalls.
• OpenStreetMap (parts-store search) — when you search for nearby parts stores, the area/coordinates you provide are sent to perform the search.
• Anthropic (the import reader) — when you bring in a customer or inventory list SideWRK can't read in your browser, that file — a spreadsheet's text, a PDF, or a photo of a handwritten page — is sent to Anthropic to turn it into rows you review before anything saves. It is not used to train anyone's model, and it only runs when you choose to import.
• Stripe (payments) — processes your subscription and, if you switch it on, your customers' card payments. Those go to your own connected Stripe account, not to us. Card details are handled by Stripe and never stored by SideWRK.

We may also disclose information if required by law, or to protect the rights, safety, and security of SideWRK and its users.

The customer estimate / approval page

When you send an estimate, SideWRK creates an unguessable link (e.g., sidewrk.app/?e=…) that shows that one job's estimate, photos, and approve/decline buttons. The page is token-gated and not indexed by search engines, and it never reveals your private part costs. Anyone you share that link with can view and respond to that estimate.

Data retention & deletion

We keep your data while your account is active. You can edit or delete customers, vehicles, jobs, and files in the app at any time. You can delete your whole account yourself from the app (Shop → Delete account). When you do, your data is kept for 60 days so you can restore it if you change your mind — just log back in within that window. After 60 days it is permanently deleted. We may keep limited records (such as the reason you gave for leaving, and anything required for legal, tax, or security reasons) beyond that.

Security

Data is encrypted in transit (HTTPS). Each account's records are isolated at the database level (row-level security), and files live in a private store accessible only to your account or via the unguessable estimate links you choose to share. No system is perfectly secure, but we work to protect your data.

Your choices & rights

Depending on where you live (for example, under the California Consumer Privacy Act or GDPR), you may have rights to access, correct, export, or delete personal information, and to object to certain processing. To exercise these rights, contact us. If your request involves your customers' data, we will help you act on it as the business that controls that data.

Children

SideWRK is a business tool intended for adults (18+). It is not directed to children, and we do not knowingly collect their information.

International

SideWRK is operated from, and stores data in, the United States. If you use it from elsewhere, you consent to processing in the U.S.

Changes

We may update this policy; we'll change the "Last updated" date above and, for material changes, take reasonable steps to notify you.

Contact

Questions or requests: james@sidewrk.app. Mail: SideWRK, 23 Corporate Plaza Dr. Ste 150-88A, Newport Beach, CA 92660-7908.