Legal

Privacy policy

Last updated 27 October 2026

The short version

  • We collect what you give us (your account, your vehicles, and the problems, photos and recordings you share) so OnlyMech can work out what’s wrong and find the right part.
  • We don’t sell your personal information, and we don’t show you ads.
  • We use trusted providers to run the service, including AI providers that help generate answers. Your information may be stored and processed in the United States.
  • You can see, correct or delete your information at any time by writing to us.

  1. Who we are

    OnlyMech is a service of 18289573 Canada Inc. (“OnlyMech”, “we”, “us”), a company incorporated in Canada with its registered office at 175-5005 Dalhousie Dr NW #1478, Calgary, Alberta T3A 5R8, Canada.

    This policy explains how we handle personal information when you use the OnlyMech website and apps (the “service”). We are responsible for the personal information we hold and have named a Privacy Officer to answer for it (see “Contact us”).

  2. Information we collect

    We collect only what we need to provide the service:

    • Account details: your name, email address, sign-in details (handled by our sign-in provider; we never see your password), account type, and for garage accounts the business name and the people you invite.
    • Vehicle details: the VIN, year, make, model and engine of the vehicles you add, and their service history.
    • What you tell us about a problem: descriptions, answers to our questions, photos, videos, audio recordings, documents such as code-reader reports, and the conversation that follows.
    • Parts and repairs: parts suggested, ordered or fitted, and notes you add.
    • Technical information: device and browser type, IP address, pages used, error reports and security logs, which we use to keep the service working and safe.
    • Messages you send us, such as support requests and feedback.

    Photos and videos can contain information you might not expect, such as where they were taken or a vehicle’s licence plate. Please only share what’s needed to show the problem.

  3. How we use your information

    • To provide the service: identify your vehicle, understand the problem, ask follow-up questions, suggest likely causes and fixes, and find parts that fit.
    • To keep a record of your vehicles, cases and repairs so later answers can build on them.
    • To run accounts, including garage accounts shared with team members.
    • To keep the service secure, prevent misuse and fix problems.
    • To improve the service, using information that has been de-identified wherever we reasonably can.
    • To contact you about your account and important changes, and, only if you agree, to send news and offers.
    • To meet legal obligations and enforce our terms.

    We will ask for your consent before using your information for a new purpose that you would not reasonably expect.

  4. How OnlyMech’s AI uses your information

    OnlyMech uses artificial intelligence to understand what you describe and to suggest causes, checks and parts. To do this, the relevant parts of your case (your description, vehicle details, photos and recordings) are sent to AI model providers that process them on our behalf and return an answer.

    We use these providers under business terms that limit them to processing your information to provide the service to us. We do not use your photos, recordings or conversations to train AI models without your consent.

    Answers are produced automatically and can be wrong. They are suggestions to help you decide, not a final decision made about you. See our Terms of service for how to use them safely.

  5. Who we share it with

    We share personal information only as described here. We never sell it.

    • Service providers who run parts of OnlyMech for us under contract, including Google Cloud and Firebase (hosting, databases, file storage and sign-in), AI model providers (such as Google, OpenAI and Anthropic), and email delivery providers.
    • Vehicle data services: when you add a vehicle, its VIN is sent to vehicle databases such as the U.S. National Highway Traffic Safety Administration’s VIN decoder. Only the VIN is sent.
    • Your team: in a garage account, cases, vehicles and parts are visible to the account’s members.
    • People you choose to share with, for example a garage you show your case to.
    • Authorities or others when the law requires it, or when needed to protect someone’s safety or our legal rights.
    • A buyer or successor if our business is sold or merged, who must protect your information in line with this policy.

  6. Where your information is stored

    Our main systems are hosted in the United States, and some providers may process information in other countries. When information is outside Canada it is protected by our contracts with those providers, but it may be accessible to courts, law enforcement and national security authorities in those countries under their laws.

  7. How long we keep it

    We keep your information for as long as your account is open and as long as we need it for the purposes above. If you delete your account, we delete or de-identify your personal information within 90 days, except where we must keep some of it longer by law (for example tax records) or to resolve disputes. Copies in backups are removed as the backups expire.

  8. Your choices and rights

    • Ask for a copy of the personal information we hold about you.
    • Ask us to correct information that is wrong or incomplete.
    • Ask us to delete your account and information.
    • Withdraw your consent, for example to marketing emails, at any time. Withdrawing may mean we can’t provide some or all of the service.
    • Unsubscribe from marketing emails using the link in any of them.

    To make a request, contact our Privacy Officer. We will reply within 30 days and may need to confirm your identity first. If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner. If you live in Quebec, the UK or the European Union, you have the rights your local law gives you, including complaining to your local data protection authority.

  9. How we protect it

    We use safeguards suited to the sensitivity of the information, including encryption in transit, access controls that limit who can see your data, and secure cloud infrastructure. No system is perfectly secure; if a breach creates a real risk of significant harm to you, we will tell you and the authorities as the law requires.

  10. Children

    OnlyMech is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.

  11. Cookies and similar technologies

    We use essential cookies and browser storage to keep you signed in, remember your settings and keep the service secure. We do not use advertising cookies or sell information to advertisers. If we add analytics, we will update this policy and, where the law requires, ask for your consent.

  12. Changes to this policy

    We may update this policy as OnlyMech changes. We will post the new version here with a new “Last updated” date and, for significant changes, tell you by email or in the app before they take effect.

  13. Contact us

    Privacy Officer, 18289573 Canada Inc. (OnlyMech), 175-5005 Dalhousie Dr NW #1478, Calgary, Alberta T3A 5R8, Canada. Email: info@onlymech.com (subject “Privacy”).