Skip to main content

Privacy Policy

Last Updated: February 8, 2026

Introduction

Pacella Cloudworks LLC, doing business as ShopWerks ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

Repair Order and Customer Data Processing

Important: Customer PII from repair orders is never stored in our database.

When you upload a repair order for audit review:

  • Your file is transmitted securely using TLS 1.2 or higher encryption to our servers for processing
  • We use automated vision services to extract repair documentation text from your uploaded files
  • Customer personally identifiable information (PII) - including names, addresses, phone numbers, email addresses, VINs, license plates, and payment information - is automatically detected and redacted during processing
  • Original uploaded files are processed in memory only and are never written to disk or stored
  • Only sanitized repair documentation (cause and correction statements, job descriptions, labor operations) is retained
  • Customer PII never enters our database

Our document processing partner (Anthropic) operates under a Data Processing Agreement that prohibits data retention and training on your content.

What We Process From Repair Orders

From uploaded repair orders, we only retain:

  • Repair job descriptions and technical notes
  • Cause and correction statements
  • Labor operation codes
  • OEM-specific terminology and diagnostic procedures
  • Non-PII repair metadata (repair categories, job types)

What We Do NOT Collect

We do not collect or store from repair orders:

  • Customer names, addresses, or contact information
  • Payment or financial information
  • Vehicle identification numbers (VINs) or license plate information
  • Driver's license or insurance information
  • Any other customer personally identifiable information

Information We Collect

Information You Provide

We collect information you voluntarily provide when you:

  • Register for an account
  • Contact us through our website
  • Use our services

This may include:

  • Your name and email address
  • Company name and shop location
  • Payment information (processed by Stripe - we do not store card details)

Automatically Collected Information

When you visit our website, we collect:

  • Browser type and operating system
  • IP address and general location
  • Pages viewed and time spent on our site

How We Use Your Information

We use your information to:

  • Provide and maintain our compliance audit services
  • Generate audit-ready documentation and suggested rewrites
  • Process your transactions and manage your account
  • Communicate with you about your account or our services
  • Improve and develop our products
  • Prevent fraud and ensure security

We do not sell your personal information.

Data Retention

  • Account information: Retained while your account is active and for up to 30 days after account closure to allow for reactivation
  • Story checks: Retained for 365 days, then automatically deleted
  • Audit reports: Retained for 365 days, then automatically deleted
  • Audit logs: Retained for 3 years (1,095 days) for compliance record-keeping, then automatically deleted
  • Original uploaded files: Never stored, processed in memory only
  • Billing records: Retained as required by tax and accounting laws

Automated data cleanup runs daily. You may delete individual reports or story checks at any time through your account.

Upon account termination, you may export your data (audit reports, generated documentation) in standard formats (PDF, CSV) through your account settings. We will retain your data for 30 days after termination to allow for export, after which it will be permanently deleted.

You may request deletion of your data at any time by contacting us at privacy@shopwerks.ai.

Service Providers

We work with the following third-party service providers:

  • Anthropic - Document analysis and compliance report processing. Operates under a Data Processing Agreement that prohibits data retention and training on your content.
  • Clerk - User authentication and account management. Clerk processes authentication data (email addresses, session tokens) under their Data Processing Agreement and in accordance with their published privacy commitments.
  • Stripe - Payment processing (we do not store your payment card details)
  • Railway - Application hosting and backend infrastructure
  • Vercel - Frontend hosting and content delivery
  • Cloudflare - DNS management, DDoS protection, and content delivery
  • Redis (via Railway) - Transient job queue processing. No personal data is stored; repair order processing jobs are held temporarily and automatically removed after completion.
  • Web3Forms - Contact form submissions. Receives only the information you voluntarily submit through our contact form (name, email, message).

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Data Residency

All account data and audit reports are stored and processed within the United States. Our infrastructure providers (Railway, Vercel, and Cloudflare) operate data centers across multiple US regions. We do not intentionally transfer or store your data outside the United States. If this changes, we will update this policy and notify you in advance.

Subprocessor List and Change Notification

The service providers listed above constitute our current subprocessors. We maintain an up-to-date list of subprocessors on this page. If we add or replace a subprocessor that handles personal information, we will update this policy and notify active account holders by email at least 30 days before the new subprocessor begins processing data. If you object to a new subprocessor, you may contact us at privacy@shopwerks.ai to discuss your concerns or terminate your account.

Data Security

We protect your information through:

  • TLS 1.2 or higher for all data in transit
  • AES-256-GCM field-level encryption at rest for sensitive data fields
  • Password hashing using bcrypt with salted rounds
  • Memory-only processing of uploaded files (never written to disk)
  • Automated PII detection and redaction
  • Strict access controls and authentication

No system is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

Your Rights

You may contact us at privacy@shopwerks.ai to:

  • Access a copy of your personal information
  • Correct inaccurate information
  • Delete your account and associated data
  • Ask questions about our data practices

We will respond to privacy requests within 30 days.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Categories of Personal Information We Collect

We collect the following categories of personal information, along with their sources:

  • Identifiers (name, email address, IP address) collected directly from you during registration and automatically through website usage
  • Commercial information (subscription plan, transaction history) collected through your use of the Service and our payment processor
  • Internet or network activity (browser type, pages viewed, session data) collected automatically when you visit our website
  • Professional information (company name, shop location) collected directly from you during registration

How We Use This Information

We use personal information for the business purposes described in the "How We Use Your Information" section of this policy, including providing our services, processing transactions, communicating with you, and improving our products.

Your California Rights

As a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose about you
  • Delete your personal information, subject to certain exceptions
  • Correct inaccurate personal information we hold about you
  • Opt out of the sale or sharing of personal information for cross-context behavioral advertising
  • Non-discrimination for exercising your privacy rights

Do Not Sell or Share My Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Because we do not engage in these activities, there is no need to opt out, but you may still contact us at privacy@shopwerks.ai with any questions or concerns.

Exercising Your Rights

To exercise any of your California privacy rights, contact us at privacy@shopwerks.ai. We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf by providing written authorization.

Cookies

We use essential cookies to:

  • Keep you logged in to your account
  • Remember your preferences
  • Ensure the website functions properly

Specifically, our site sets the following cookies:

  • Clerk session cookies (__session, __client_uat) for authentication and session management
  • Cloudflare cookies (__cf_bm) for bot protection and security

We do not use advertising or tracking cookies. All cookies we set are strictly necessary for the operation of our services.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of external websites.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@shopwerks.ai.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, for significant changes, by email or prominent notice on our website.

Your continued use of our services after changes indicates acceptance of the updated policy.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected individuals and applicable authorities within 72 hours of confirming the breach, or as otherwise required by applicable law. Notification will include a description of the breach, the types of information involved, and recommended steps you can take to protect yourself.

Contact Us

For questions about this Privacy Policy or our data practices:

Mailing Address:

Pacella Cloudworks LLC dba ShopWerks
341 East Broade Street
Leander, TX 78641
United States

Back to Home