Privacy Notice

Last updated: 2026-06-07

This Privacy Notice explains how ECP The Company LLC ("we", "us", "our") collects, uses, and protects personal data when you use Warranty Works (the "Service"). We act as the data controller for personal data processed through the Service.

1. Information We Collect

Account data — name, email address, password hash, business name.
Claim data — warranty claim records you create or import (customer name, repair order numbers, parts, serial numbers, claim values, attachments).
Gmail integration data — if you connect Gmail, OAuth tokens and message metadata used to detect warranty-related emails. We do not read mail beyond what is needed for the feature.
Inbound email content — emails forwarded to your unique Warranty Works inbound address.
Usage and device data — IP address, browser type, pages viewed, timestamps, error logs.
Support communications — messages you send to us.

2. How We Use Your Information

To provide, operate, and improve the Service.
To authenticate you and secure your account.
To process warranty claims and integrate with Gmail when you opt in.
To prevent fraud, abuse, and security incidents.
To respond to support requests.
To send service-related notifications (you cannot opt out of these while you have an account).

3. Legal Bases (where GDPR / UK GDPR applies)

Performance of a contract (providing the Service to you).
Legitimate interests (security, fraud prevention, product improvement).
Consent (e.g., Gmail integration scopes you grant).
Legal obligation (tax, accounting, lawful requests).

4. How We Share Information

We share personal data with:

Service providers and subprocessors — hosting (Supabase, Cloudflare), email infrastructure, error monitoring, analytics.
Merchant of Record (Paddle) — for processing payments, managing subscriptions, calculating sales tax, and issuing invoices and refunds.
Google — when you choose to connect Gmail.
Professional advisers — legal and accounting.
Authorities — when required by applicable law.

We do not sell personal data.

5. International Transfers

Some of our subprocessors may process data in the United States or other countries. Where required, we rely on Standard Contractual Clauses or other approved safeguards.

6. Data Retention

We retain personal data for as long as your account is active. After account deletion, we delete or anonymize personal data within 30 days, except where longer retention is required by law (e.g., accounting records).

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. You may also withdraw consent for processing based on consent (e.g., disconnect Gmail) and lodge a complaint with a data-protection authority. To exercise these rights, email warrantyworkshelp@gmail.com. We will respond within 30 days.

8. Security

We use industry-standard technical and organizational measures, including encryption in transit, row-level security on user data, access controls, and audit logging. No system is perfectly secure; notify us immediately if you suspect a vulnerability.

9. Cookies

We use essential cookies for authentication and session management. We may also use limited analytics cookies to understand how the Service is used. You can manage cookies through your browser settings.

10. Children

Warranty Works is intended for business users and is not directed to children under 16. We do not knowingly collect personal data from children.

11. Changes

We will update this Privacy Notice from time to time and notify you of material changes by email or in-product notice.

12. Contact

Questions or requests: warrantyworkshelp@gmail.com.