This policy explains how Mekanik (mekanik.ai) collects, uses, and protects your information. We are based in Montreal, Quebec, Canada and are committed to handling your data responsibly.
1. Information We Collect
Account Information
Name and email address
Shop name and address
Google account info (if you sign in with Google OAuth)
Uploaded Content
Service manual PDF files you upload
Manual metadata (make, model, year)
Indexed text extracted from your PDFs for search
Usage Data
Search queries
Features used
Device and browser information
Payment Information
Payments are processed by Stripe. We do not store your credit card number, CVV, or full card details. Stripe handles all payment data under their own Privacy Policy.
2. How We Use Your Information
Data
Purpose
Email, name
Account login, communication, service updates
Shop name and address
Display in your dashboard and QR code feature
Uploaded PDFs
Index content so you can search it with AI
Search queries
Provide AI-powered answers from your manuals
Usage data
Improve the service and fix bugs
We do not sell your personal data. Not to advertisers, data brokers, or anyone else.
3. How We Store Your Data
Authentication: Managed by Supabase (including Google OAuth sign-in)
Database: User accounts, shop info, and manual metadata stored in Supabase (PostgreSQL)
File storage: Uploaded PDF files stored in AWS S3
Payments: Subscription and billing data handled by Stripe
All data is encrypted in transit (TLS/HTTPS) and at rest.
4. Data Isolation and Security
Your manuals are private. Each shop's documents are isolated and only accessible by that shop's authorized users
No sharing. Your documents are never shared with other users or third parties
No AI training. Your uploaded manuals are not used to train AI models -- they are only used to answer your search queries
QR code access is limited to searching -- no document downloads or full-page viewing
5. Third-Party Services
We rely on these third-party providers:
Supabase -- Authentication and database
AWS S3 -- PDF file storage
Stripe -- Payment processing
Google -- OAuth sign-in
Anthropic (Claude AI) -- AI-powered search responses. Search queries and relevant manual excerpts are sent to Anthropic's API. Anthropic does not use this data for training. See Anthropic's Privacy Policy.
Voyage AI -- Text embeddings for search. Manual text is sent to generate search vectors. Content is not stored or used for training.
6. Cookies and Sessions
We use cookies and local storage for session management and authentication tokens
We store your language preference locally
We do not use third-party tracking cookies
We do not use analytics trackers (Google Analytics, Facebook Pixel, etc.)
7. Data Retention
Your data is retained for as long as your account is active
Deleted manuals are removed from our systems within 24 hours
If you delete your account, all data (manuals, search history, profile) is permanently deleted within 30 days
We may retain anonymized, aggregated usage statistics that cannot identify you
8. Your Rights
You have the right to:
Access your data -- view your profile and uploaded manuals at any time
Delete your data -- remove individual manuals or your entire account
Export your data -- contact us to request a copy
Correct your data -- update your profile information in Settings
9. Children's Privacy
Mekanik is not intended for anyone under 18. We do not knowingly collect information from children.
10. Quebec and Canadian Privacy Law
We comply with applicable Canadian privacy legislation, including Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). You may file a complaint with the Commission d'acces a l'information du Quebec if you believe your rights have been violated.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or in-app notification. The "Last updated" date at the top reflects the most recent revision.