Privacy Policy

• Account details: name, email address, password (stored hashed by our authentication provider), and the details you submit when requesting to join.
• Profile: phone number, location or shop address, bio, current and desired job roles, skill self-ratings, and career goals.
• Certifications and other credentials: which credentials you hold (picked from our list or typed in), credential numbers, issue and expiry dates, yearly training-credit progress, notes, and any documents or photos you choose to upload as proof. For a respirator medical clearance we keep only that you're cleared and the date, never medical details.
• Messages and posts: messages you send other members, including images and PDFs you attach, and bulletins posted by shop owners.
• Connections and safety: connection requests, favorites, blocks, and any reports you submit about other members.
• Preferences: which emails you want from us, the hour and time zone for your daily unread-messages email, your SMS consent choice, and who may see your email and phone number. Your time zone is filled in from your device; you can change it.

• Basic technical data needed to run the Service, such as log data, device and browser type, and timestamps.
• Crash and error reports from the mobile app, linked only to your account ID (not your name or email), so we can fix problems. Before a report is sent we strip web addresses, sign-in and invite links, and console text, and we don't collect performance traces.
• Map coordinates for the location you enter, used to work out distances in search. Other members never see your coordinates or street address.
• Photos uploaded in the web app or the Shop Portal have their location metadata (EXIF/GPS) removed before they are stored.

We do not use advertising trackers and we do not sell your personal information.

We contact collision repair shops to tell them about CRX. For this, we collect business contact information from public sources such as shop websites and business directories, and from our conversations with shops. This can include the shop's name, address, phone number, and website, and the name, job title, and work email of the person we speak with.

Our outreach calls may be made by an automated assistant, and calls may be recorded and transcribed so we can follow up accurately. We use this information only to contact the shop about CRX and to keep track of those conversations. We do not sell it.

If you'd like us to stop contacting you, or to delete the information we hold about you or your shop, tell us on the call, reply "unsubscribe" to any of our emails, or email Contact@collisionrepairxperts.com, and we will honor your request.

• To create and secure your account and review requests to join.
• To match you with mentors and peers by skills, roles, goals, and distance.
• To deliver messages, notifications, bulletins, certification reminders, a daily email listing messages you haven't read, and, if you turn it on, a monthly summary of your credentials and goals. Shop owners and managers also get reminders about their shop's program renewals and audits and a shop summary email.
• To let your shop's owner and managers (if you join a shop) review your skills and certifications, suggest goals, and get reminders before your certifications expire.
• To enforce our Terms of Service, respond to reports, and keep the community safe.
• To operate, maintain, and improve the Service.

• Other members can see your name, roles, city and state, bio, and skill ratings, plus your distance from them rounded to about 5 miles. They also see the certifications you show on your profile: each one's name, whether it's current, and whether a shop verified it, never its dates, numbers or documents. They see the specializations you've earned (such as Structural or Refinish), which come from those certifications and your skill ratings, and your tier (A, B or C) only if you choose to show it. They never see your street address or exact location. Your email and phone number follow the visibility you choose in Privacy Settings (public, contacts only, favorites only, or private).
• On a standard CRX account, your profile is always visible to the rest of the CRX network. You can't hide your profile entirely, but you choose who sees your email and phone number in Privacy Settings, and you can block anyone you don't want to see your profile.
• Shops in our early access test. Some shops are testing tools that let them manage their team on CRX. If you join one of these shops, its owner or a manager sets how visible your profile is outside the shop: visible across CRX, hidden from outside, or kept entirely inside the shop. Only the owner or a manager can change that while you're on the team. Your email and phone settings stay yours. If you leave the shop, your profile goes back to standard visibility across the CRX network.
• Your shop's owner and managers, if you join a shop, can see your skills, roles, tier, specializations, goals, activity, and certifications (including credential numbers and documents, but not ones you keep to yourself) so they can support your development and verify credentials, and they can set your tier and confirm your specializations, and can see your email and phone number whatever your Privacy Settings say. If the owner or a manager sets a last day for you, you're removed from the team on that day and we tell you then. Leaving the shop ends this access, except that the shop keeps a read-only copy of the certifications it could see, as they were on your last day, for its records. It never sees certifications you add or change after you leave. Deleting your account deletes that copy too.
• Your managers, if you own a shop, can always see your email address so they can reach you. Your phone number follows your Privacy Settings. If you choose to count yourself on your team, your managers can also see your certifications the way they see a team member's.
• Other people in your shop's organization, if you join a shop, can find you and send you messages without connecting first. They see your email and phone number only as your Privacy Settings allow. Leaving the shop ends this.
• CRX administrators can access account information, including your email, phone number, and address, to operate the Service and investigate reports.
• Members you block can no longer find you, view your profile or contact you, and you can't message them. Blocking ends your connection with them. If they are on your shop's team, they still see your name on the team list. You can unblock someone from Profile → Blocked people.

We share information only with providers that help us run the Service, under agreements that limit their use of it:

• Supabase — database, authentication, and file storage
• Vercel — website and application hosting
• Twilio SendGrid — transactional email
• Twilio — SMS: alerts to CRX staff about new requests to join (including the requester's name and email), and texts to you only if you opt in
• Google Maps Platform — address suggestions as you type and location coordinates (requests are sent from our servers, not your device)
• Sentry — crash and error reporting for the mobile app (scrubbed as described above)
• Expo — building and updating the mobile app
• Inkbox — outreach phone calls, call recordings, and transcripts
• ClickUp — storing business contact information and outreach notes
• Google Workspace — business email

We may also disclose information if required by law or to protect the rights and safety of our members and DaoWay, LLC.

• Edit your profile, roles, skills, goals, and certifications at any time in the app. Removing a certification takes it off your profile; we keep it in your own history (with earlier versions and who verified it) until you delete your account.
• Turn off “Show on my profile” on any certification to keep it to yourself, off your profile and away from your shop. Ones you type in yourself start that way. CRX staff review typed-in credentials and may add them to our list or match them to an existing entry; we tell you when that happens.
• Control who sees your email and phone number in Privacy Settings.
• Choose which emails you get, and when your daily unread-messages email arrives, in Settings → Email notifications. Every one of these emails links to that page. Turn SMS on or off in your profile, or reply STOP.
• Block or report any member from their profile.
• Delete your account from Profile → Delete Account. Your profile and account data are deleted immediately, along with any requests to join and shop invites sent to your email. Files tied to your account (certification documents, including ones your shop uploaded for you, and message or bulletin attachments) are permanently deleted within 30 days, except where we must keep limited records to meet legal obligations or resolve disputes. If you own a shop, deleting your account deletes that shop's organization for everyone, so ask us to transfer ownership first if someone is taking over.
• If we've contacted your shop, ask us to stop contacting you or delete your information by emailing Contact@collisionrepairxperts.com.

We protect your information with encryption in transit, access controls, and row-level security that limits each account to the data it is allowed to see. Uploaded certification documents and message attachments are stored privately. We keep your information for as long as your account is active. When you delete your account, your account data is deleted immediately and your files within 30 days. If you never become a member (for example, a request to join that was declined or never used, or a shop invite you didn't accept), we delete that request or invite 90 days after it was decided or last sent. Security counters such as sign-in and link attempts are kept for a few days, and IP addresses in our admin logs for 90 days. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The Service is intended for people working or training in the collision repair industry and is not directed to children under 13. We do not knowingly collect information from children under 13; if you believe we have, contact us and we will delete it.

We may update this policy from time to time. If we make material changes we will notify you in the app or by email, and the effective date above will change.

Questions or requests about your privacy? Email Contact@collisionrepairxperts.com.

Mailing address: DaoWay, LLC, 30 N Gould St Ste N, Sheridan, WY 82801.