Skip to content
Not sure a repair quote is fair? Check it free with Fixxr.
Fixxr

Legal

Privacy Policy

This explains what information Fixxr collects when you use our app and site, why we collect it, and the choices you have.

Effective date: July 28, 2026

1. Introduction & scope

Fixxr Technologies, Inc. (“Fixxr,” “we,” “us,” or “our”) operates the Fixxr mobile application and the website at https://fixxr.repair (together, the “Services”). Fixxr is a marketplace platform that helps drivers understand car repair quotes, diagnose vehicle problems, and connect with independent, third-party repair shops.

This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, create an account, use the app, request a quote or repair, or otherwise interact with the Services. It applies to visitors, registered drivers, and repair-shop business users unless a separate agreement says otherwise. By using the Services, you acknowledge the practices described here.

2. Information you give us directly

We collect information you choose to provide, including:

  • Account information: name, email address, phone number, password, and profile details when you register for an account.
  • Mobile number and text messages: the mobile number you enter to sign in. We use it to send you a one-time verification code by SMS, and to send service messages about a repair job you posted. See Section 9 for how we handle mobile information, and Section 4 of our Terms & Conditions for message frequency, rates, and how to opt out.
  • Vehicle information: vehicle identification number (VIN), make, model, year, trim, mileage, license plate, and maintenance history you enter or that we decode from your VIN, so we can give you accurate diagnostics and quote comparisons.
  • Repair requests and quotes: descriptions of vehicle issues, photos or videos you upload, diagnostic scan results, quotes you receive from repair shops, and your communications with shops through the Services.
  • Payment information: billing details and payment method information, which is collected and processed by our third-party payment processor(s) (see Section 6). Fixxr does not store full payment card numbers on our own servers.
  • Newsletter and marketing sign-ups: your email address if you subscribe to our newsletter or request marketing communications.
  • Communications: information you provide when you contact customer support, submit a review, or respond to a survey.

3. Information collected automatically

When you use the Services, we and our service providers automatically collect certain information using cookies, SDKs, and similar technologies, including:

  • Device information: device type, operating system, browser type, unique device identifiers, and mobile network information.
  • Usage data: pages and screens viewed, features used, referring/exit pages, links clicked, and timestamps.
  • IP address and approximate (IP-based) location: used to infer your general city/region for the purpose of showing nearby repair shops and for security and fraud prevention.
  • Session replay data: mouse movement, clicks, taps, scrolling, and on-screen interactions, captured by the tools described in Section 4.

4. Cookies, analytics & tracking tools

We use cookies, local storage, SDKs, and similar technologies for the specific purposes described below. Except for tools that are strictly necessary to operate the Services, these tools only run after you provide consent through our cookie/consent banner, consistent with Section 9 and applicable law. You can change your choices at any time using the “Manage Cookie Preferences” link in the site footer or your device’s app settings.

  • PostHog (product analytics & session replay) — helps us understand how people use the app and website (feature usage, funnels, retention) and, where enabled, records anonymized or pseudonymized session replays of on-screen activity so we can diagnose bugs and improve the product experience.
  • Microsoft Clarity (heatmaps & session recording) — generates heatmaps and session recordings of how visitors interact with our website (clicks, scrolling, navigation paths) to help us improve usability. Microsoft may use Clarity data as described in the Microsoft Privacy Statement.
  • Google Analytics 4 (GA4) & Google Tag Manager (GTM) — measure site and app traffic, audience demographics (where available), and how visitors find and use the Services. GTM is a tag-management container used to deploy the other analytics/marketing tags on this list in a consent-controlled way.
  • Meta (Facebook) Pixel — measures the effectiveness of our advertising on Facebook and Instagram and helps us build advertising audiences. Meta may combine this data with other information it holds about you under its own privacy policy.
  • TikTok Pixel — measures the effectiveness of our advertising on TikTok and helps us build and measure advertising audiences on that platform.

Independent controllers. Advertising pixels such as the Meta Pixel and TikTok Pixel may act as independent controllers of the data they collect through our Services, meaning the ad platform determines its own purposes for using that data (for example, ad personalization across its own platform) in addition to the reporting it provides to us. Review each platform’s own privacy policy to understand its independent use of your information.

Managing your choices. Our cookie banner lets you accept or reject non-essential cookies by category (e.g., “measurement/analytics” covers PostHog, Clarity, GA4, and GTM; “marketing” covers the Meta and TikTok pixels). Strictly necessary cookies (e.g., for authentication and security) do not require consent and cannot be turned off. You can also control cookies through your browser settings, and mobile OS-level tracking controls (such as iOS App Tracking Transparency) where applicable.

5. Precise location data

With your permission, the Fixxr app may collect precise (GPS-based) location data to find repair shops near you, estimate distance and drive time, and support roadside or mobile-repair matching. Precise geolocation is considered sensitive personal information under several state privacy laws (see Section 11). You can enable or disable location permissions at any time in your device settings; doing so may limit certain features (like distance-sorted shop results).

6. Information from third parties

We also receive information about you from:

  • Repair shops: quotes, invoices, repair status updates, and communications shops enter about your vehicle or repair request.
  • Payment processors: confirmation of payment, transaction status, and fraud-risk signals from processors such as our payment provider(s) (Stripe).
  • Advertising and analytics partners:aggregated or audience-matching data from the ad and analytics platforms listed in Section 4, used to measure and improve our marketing.
  • Vehicle data providers: VIN-decoding and vehicle specification data used to populate make/model/ trim details and maintenance schedules.

7. How we use information

We use the information described above to:

  • Provide, operate, and maintain the Services, including matching you with repair shops and displaying quotes.
  • Evaluate whether a repair quote appears fair using vehicle, repair, and regional pricing data.
  • Process payments and prevent fraud.
  • Personalize your experience and remember your vehicles and preferences.
  • Send transactional messages (e.g., quote updates, appointment confirmations) and, where you’ve opted in, marketing and newsletter communications.
  • Monitor, debug, and improve the Services, including through the analytics and session-replay tools in Section 4.
  • Measure and optimize our advertising.
  • Comply with legal obligations and enforce our Terms & Conditions.

8. How we share & disclose information

We disclose information:

  • With repair shops you request a quote from or engage, so they can evaluate and perform the requested work.
  • With service providers who process data on our behalf (hosting, payment processing, customer support, analytics, and the tools named in Section 4), under contractual confidentiality and use restrictions.
  • With advertising partners (Meta, TikTok, Google) for marketing measurement, subject to your consent choices. As noted in Section 4, these partners may act as independent controllers of data collected through their pixels.
  • For legal reasons, to comply with applicable law, respond to lawful requests, or protect the rights, property, or safety of Fixxr, our users, or the public.
  • In a business transfer, such as a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
  • With your consent or at your direction.

We do not sell your precise geolocation or VIN to data brokers. See Section 9 for our sale/share disclosure.

Mobile information. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are never shared with any third party. We share your mobile number with our SMS delivery provider only to the extent needed to send you the verification codes and service messages you asked for, and otherwise only as described in this section (for example, where required by law).

9. “Do Not Sell or Share My Personal Information” & Global Privacy Control

Depending on how you interpret “sale” and “share” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), our use of advertising pixels (Meta Pixel, TikTok Pixel) and certain analytics integrations may constitute a “sale” or “share” of personal information for cross-context behavioral advertising, even though no money changes hands.

You can opt out of this sale/sharing at any time by:

  • Using the “Do Not Sell or Share My Personal Information” link in the site footer, or the equivalent control in the app’s privacy settings;
  • Rejecting the “marketing” cookie category in our consent banner; or
  • Enabling a Global Privacy Control (GPC) signal in a supporting browser or browser extension. We treat a detected GPC signal as a valid opt-out-of-sale/share request for that browser, consistent with CPRA regulations.

We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age without affirmative authorization as required by CPRA.

10. Privacy rights by state

If you are a resident of California, you have rights under the CCPA/CPRA to know/access the categories and specific pieces of personal information we hold about you, request deletion, request correction, opt out of sale/sharing and targeted advertising (Section 9), limit use of sensitive personal information (Section 11), and not be discriminated against for exercising these rights. To exercise these rights, contact us using Section 19 or use in-app privacy controls where available; we will verify your request using information reasonably necessary to confirm your identity.

Colorado, Connecticut, and Virginia residents have similar rights under the Colorado Privacy Act, Connecticut Data Privacy Act, and Virginia Consumer Data Protection Act, including rights to access, correct, delete, obtain a portable copy of your data, and opt out of targeted advertising, sale, and certain profiling. You may appeal a denied request by contacting us at the address in Section 19.

Texas residents have similar rights under the Texas Data Privacy and Security Act, including the right to opt out of the sale of personal data and use of sensitive/biometric data.

11. Sensitive personal information

Certain information we process is treated as “sensitive personal information” under state privacy laws, including precise geolocation (Section 5) and, potentially, vehicle identification/ownership details tied to an identifiable person. We use sensitive personal information only as reasonably necessary to provide the Services you request (e.g., finding nearby shops, identifying your vehicle for accurate quotes) and for security purposes. You may limit our use of sensitive personal information for purposes beyond providing the Services using the contact details in Section 19.

12. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of the Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, contact us using Section 19 and we will take steps to delete it.

13. Data retention

We retain personal information for as long as reasonably necessary to provide the Services, comply with our legal obligations (including tax, accounting, and dispute-related recordkeeping), resolve disputes, and enforce our agreements. Retention periods vary by data type; for example, account and repair-history data is generally retained for the life of your account and for a reasonable period afterward to satisfy those obligations, while analytics and session-replay data is generally retained by our providers for a shorter period and may be deleted sooner.

14. Data security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor security review. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

15. International users

Fixxr currently operates in the United States, and this Privacy Policy is written with U.S. state privacy laws in mind. If Fixxr expands to the European Union, United Kingdom, Brazil, or other jurisdictions with their own data protection frameworks (such as the GDPR, UK GDPR, or Brazil’s LGPD), this section will be updated to describe our legal basis for processing, your rights under that law, applicable international data transfer mechanisms, and contact details for any required local representative or data protection officer. [This section is a placeholder for future expansion and does not currently reflect an operative GDPR/LGPD compliance program.]

The Services may link to third-party websites, shop profiles, or apps we do not control. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policy of any third-party site or service before providing information to it.

17. Meta / Facebook data deletion requests

If you signed in or interacted with Fixxr through Facebook or Instagram and would like us to delete data received from Meta, you can submit a request by emailing privacy@fixxr.repair with the subject line “Meta Data Deletion Request,” or by removing Fixxr from your Facebook account’s Settings & Privacy → Business Integrations page. We will process verified deletion requests within the timeframe required by applicable law.

18. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services (such as an in-app notice or banner) or by other reasonable means before the change takes effect. The “Effective date” at the top of this page indicates when it was last revised.

19. Contact us

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at: