MTY Hub Privacy Policy
Effective October 12, 2026
MTY Collision and MTY Auto Repair (collectively, “MTY,” “we,” or “us”) use MTY Hub to manage repair operations and business communications. This policy explains how we handle information in Hub, including information from staff, customers, and connected Google services.
Information we process
- Staff account information, such as names, email addresses, phone numbers, profile images, authentication identifiers, assigned roles, and shop locations. Clerk handles account authentication and credentials.
- Business records entered or imported into Hub, including customer contact information, vehicle and repair details, estimates, appointments, task history, inventory, documents, signatures, photos, and videos.
- Business communications, including email messages and attachments, recipients, text messages, and call information from configured services.
- Technical and usage information, including browser and device information, session identifiers, application interactions, error reports, and audit logs.
How we use information
We use information to authenticate staff, enforce permissions, coordinate repairs and appointments, communicate with customers and business partners, manage documents and inventory, maintain audit history, troubleshoot problems, and improve the reliability and usability of Hub. Enabled document-reading and translation features may process relevant documents or text through service providers as part of those workflows.
Google account and Gmail data
Google sign-in provides account identity information, such as your verified email address, name, and profile image, to authenticate your staff account. An active MTY staff profile is still required to access business records. Google sign-in alone does not give Hub access to your personal mailbox.
When an authorized business mailbox is connected, Hub processes the mailbox data allowed by that connection. Depending on the integration, this may include message content, sender and recipient details, attachments, and metadata to display, organize, synchronize, and send business email. OAuth tokens or authorized service-account credentials are used to perform those operations. Mailbox access within Hub is limited by staff permissions.
MTY Hub’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide or improve the authorized, user-facing features. We do not sell Google user data, use it for advertising, or use it to train generalized artificial intelligence or machine-learning models.
Transfers of Google user data are limited to what is necessary for those features, security, applicable law, or a business transfer consistent with Google’s requirements. Human access to Google user data is limited to the access you authorize for business email features, support with your consent, security investigations, legal requirements, or other uses permitted by Google’s Limited Use requirements.
Google Maps address suggestions
Where address autocomplete is enabled, Hub uses Google Maps Places to suggest addresses. The address text you type is sent to Google to return suggestions and selected address details. This service is separate from Google sign-in and Gmail and is subject to Google’s Privacy Policy and Google Maps terms.
Sharing and service providers
Information is available to authorized MTY staff according to their assigned permissions. We use service providers for authentication, hosting, database and file storage, email and messaging, electronic signatures, analytics, document processing, and translation. These include Clerk, Convex, Vercel, UploadThing, Google, and PostHog, as applicable to the feature being used. Relevant data is processed by a provider to deliver that feature.
We share business communications and documents with the customers, insurers, vendors, and other recipients involved in an authorized workflow. We may also disclose information when required by law, to address fraud or security threats, or as part of a business transfer subject to applicable protections.
Cookies and analytics
Hub uses cookies and browser storage to maintain sign-in sessions, remember preferences, and support application operation. Where configured, PostHog collects usage events, error information, and session recordings to help diagnose issues and improve the application. Hub masks interface text and attributes in analytics autocapture and session replay, masks replay input values, and excludes authentication ticket pages from analytics initialization.
Retention and security
We retain information while needed for operations, business records, audit history, legal obligations, and dispute resolution. Disabling a staff account does not automatically delete the business records or history associated with that person. Retention depends on the type of record and the purpose for which it is kept; backups may persist after deletion from active systems.
Hub uses authenticated sessions, role-based access controls, permission checks, and HTTPS for production access. Some assets, such as profile images, supply images, and images included in outgoing communications, may be publicly accessible by URL. No storage or transmission method is completely secure.
Your choices and requests
Contact contact@mechtoyou.com to request access to, correction of, or deletion of information, or to ask about retention and connected services. We may need to verify your identity and authority over the records. Requests are subject to applicable law and legitimate recordkeeping obligations.
You can revoke an OAuth connection through your Google Account connections. For an organization-managed Google Workspace mailbox, contact your Workspace administrator to revoke delegated access. Revoking access stops future authorized access but does not automatically erase business records already stored in Hub; contact MTY to request deletion of those records.
Updates and contact
Hub is intended for authorized business users, not for use by children. Service providers may process information in countries other than your own. We may update this policy as Hub or our practices change and will update the effective date above. Material changes will be communicated to affected users where required by law.
Privacy questions: contact@mechtoyou.com.