Privacy Policy
Last updated: August 26, 2026
HostPitCrew is operated by Firstkontak Consulting Inc. It is a directory of mobile mechanics — technicians who drive to the vehicle. This policy explains what we collect, why, who sees it, and how to get it removed. If something here is unclear, write to us and we will answer in plain english.
What we collect
When you search — no account needed
- The metro and service you searched for, whether we had a match, and a coarse lane label (public or verified host).
- Standard request data: timestamp, approximate region derived from your IP, browser and device type, and the page that referred you.
Search is free and requires no account. We never blur results, hold back a price range, or ask you to sign up to see the real directory.
When you tap call or send a quote request
- The mechanic, metro, and service involved, plus the same lane label.
- For a quote request: the name, email, phone number, vehicle, and message you type into that form.
When you create an account
- Email address, display name, and primary metro.
- If you verify as a Turo host by CSV: the vehicle, trip, and earnings figures inside that export, plus a one-way hash of the file so the same export cannot be reused to verify a second account.
- If you verify by linking FK Command Center: your verification status and account link. Both products belong to the same ecosystem and share identity.
- Vehicles in your garage, including a VIN if you choose to add one. VINs are never displayed publicly and are never sent to a mechanic.
- Reviews you write, and the confirmed email address behind them.
When you list as a mechanic
- Business name, contact details, service area, services, price ranges, certifications, and insurance documents you upload for manual review.
- Business contact details are published on your public profile — that is the point of a directory listing.
Why we collect it
- To run the directory. Match you to mechanics in your metro, show honest price ranges, and pass along the quote request you asked us to send.
- To keep reviews honest. A public review requires a real captured lead and a confirmed email. No lead, no review. That floor is what keeps the directory worth reading.
- To protect the gold badge. CSV hashing and verification checks stop one export from minting several verified accounts.
- To know where to build next. Aggregate demand — how many people in a metro searched for a repair last quarter, and how many of them were verified hosts — is how we decide which cities to staff and, later, what rates to negotiate on your behalf.
Who sees what
Individual host data never reaches mechanics or the public. Anything that leaves our admin surface is aggregate — counts and ranges, never a named person, never a single row.
- Mechanics see the contact details you deliberately submit with a call tap or quote request, and nothing else about you. They do not see your garage, your VINs, your other searches, or your Turo figures.
- The public sees your reviews, your display name, and whether you carry the Verified Turo Host badge. Nothing else.
- We see the rest, internally, and keep it that way.
We do not sell personal information, and we do not share it with data brokers or ad networks.
Service providers
A short list of vendors process data on our behalf, under contract, for the purposes above:
- Supabase — database and file storage.
- Resend — transactional email (verification links, review confirmations, lead notifications).
- PostHog — product analytics. Pageviews and interaction events, tagged app=hostpitcrew.
- Railway and Cloudflare — hosting, CDN, and abuse protection.
- FK Command Center — our sister product, when you choose to link the two.
Cookies and local storage
We use a session token to keep you signed in, local storage for small interface preferences, and PostHog analytics cookies to understand how pages are used. Searching the directory requires none of them. Blocking analytics cookies does not degrade the site.
How long we keep it
- Account data, garage vehicles, reviews: until you delete the account.
- Leads and quote requests: up to 24 months, so mechanics can reference the job and we can defend against fraud.
- Search records: retained as demand signal. Personal identifiers are stripped after 24 months; the aggregate counts remain.
- Uploaded CSV files: the parsed figures and the file hash are kept; the raw file is discarded once parsed.
Your choices
- Ask for a copy of what we hold about you.
- Correct anything wrong.
- Delete your account and everything tied to it. Aggregate counts that no longer identify you stay, because they are no longer about you.
- Opt out of non-essential email at any time — every message carries an unsubscribe link.
Write to hello@hostpitcrew.com and we will act within 30 days.
Children
HostPitCrew is not directed at anyone under 16, and we do not knowingly collect their data.
Changes
If this policy changes materially, we will update the date at the top and, for account holders, send an email before the change takes effect.
Contact
Firstkontak Consulting Inc · hello@hostpitcrew.com