Privacy

Privacy policy

Last updated November 3, 2026. ShopCrank is operated by Alderman Enterprises LLC DBA ShopCrank ("ShopCrank", "we", "us"). This policy explains what we collect when a subscribing shop and its staff use ShopCrank, what happens to the records a shop keeps about its own customers, and the choices you have.

Two kinds of data

Account data is about the people who use ShopCrank: the shop owner and staff. We decide how it is used, as described here.

Shop records are what a shop enters or receives in ShopCrank about its own customers: names, phone numbers, email and street addresses, vehicles, repair orders, estimates, invoices, payments, inspections, photos, messages and call summaries. The shop controls these records. We process them on the shop's behalf to run the service, and a customer of a shop should contact that shop first about them.

What we collect

• Account details: name, work email, role, shop name, and the sign-in method (a one-time email link or Google). ShopCrank does not store shop passwords; the offline desktop edition keeps a scrambled password check on that computer only.
• Shop records: everything a shop types in, imports, uploads or receives through texting, the AI phone assistant and connected services.
• Payments: card details are entered on Stripe's hosted pages and never reach ShopCrank. We keep payment amounts, dates and references.
• Calls and texts: when the AI phone assistant answers a call, the call is transcribed so the assistant can respond, and a summary with the caller's number is saved for the shop. Audio is not recorded. Text messages sent and received through ShopCrank are stored with their delivery status.
• Usage and device data: pages and features used, errors, browser and device type, IP address, and timestamps, used to keep the service working and improve it. Analytics events are tied to your account.
• Cookies: one sign-in cookie that keeps you signed in, plus a short-lived cookie during Google sign-in. We do not use advertising cookies.

How we use it

• To provide ShopCrank: show records, send the texts and emails a shop asks us to send, take card payments, answer calls, sync with services the shop connects, and prepare reports.
• To secure the service: sign-in, role-based access, fraud and abuse prevention, rate limits, and audit logs.
• To support you, bill your subscription, and tell you about changes to the service.
• To understand how ShopCrank is used so we can fix problems and improve it.

We do not sell personal information, and we do not use shop records to train our own or any public AI model.

Who we share it with

We share data only with the service providers that run ShopCrank, each limited to what its job needs, and with services a shop chooses to connect.

• Cloudflare — hosting, database, file storage, sign-in email delivery, bot protection, and site analytics.
• Stripe — subscription billing and card payments.
• Twilio — text messages and phone calls.
• AgentPhone and xAI — the AI phone assistant and voice features.
• Google, Anthropic and Deepgram — AI features such as the assistant, estimate suggestions, transcription and speech. The text, image or audio needed for a request is sent to the provider to produce the response.
• PostHog — product analytics and error tracking.
• Services a shop connects — for example QuickBooks, PartsTech or AutoZone. Data flows to them only after the shop connects them, under their own terms.

We may also disclose data when the law requires it, to protect the rights and safety of ShopCrank, its customers or others, or as part of a merger or sale of the business, in which case this policy continues to apply.

Text messaging

Shops use ShopCrank to text their own customers about appointments, estimates, repair status, invoices and payments. Shops are responsible for getting each customer's consent before texting them. Message frequency varies with the customer's service. Message and data rates may apply. Reply STOP to stop messages from a shop and HELP for help; STOP replies are recorded and honored automatically. Customers agree to texts by checking an unchecked box on a shop's booking form, by texting the shop first, or by telling staff, who record it before any text is sent; agreeing is never a condition of service. The full program terms are on the text messaging terms page.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third party, except the service providers that deliver the messages.

How long we keep it

We keep account data and shop records while the shop's subscription is active. After a shop cancels, its records remain available for export for 90 days and are then deleted, except where a longer period is required by law, such as tax and payment records. Archived invoices and payments stay in the shop's reports until the shop's records are deleted. Backups roll off within 30 days.

Security

Data is encrypted in transit. Integration keys and tokens are encrypted at rest. Access inside a shop follows each person's role, and only shop owners and admins can delete or archive records. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.

Your choices

• Shop owners and admins can view, correct, export, archive or delete records in ShopCrank.
• Staff can ask their shop owner to update or remove their profile.
• A shop's customer who wants their information corrected or deleted should contact that shop. We will help the shop respond.
• Depending on where you live, including California, you may have rights to know, access, correct or delete personal information and to not be discriminated against for using them. Write to us to make a request; we will verify it and respond within the time the law allows.

Children

ShopCrank is a business tool and is not directed to children under 16. We do not knowingly collect their information.

Changes

We will post changes here and update the date at the top. If a change is significant, we will tell shop owners by email or in the app before it takes effect.

Contact

Alderman Enterprises LLC DBA ShopCrank. Email [email protected] with privacy questions or requests.