LeftoverBolts Privacy Policy

DRAFT — NOT LEGAL ADVICE. Prepared for attorney review before launch. Do not publish as-is. Items in [BRACKETS] are placeholders. Last drafted: 2026-10-13.

Effective date: [EFFECTIVE DATE] · Operator: Wayland Wenschlag (sole proprietor) d/b/a LeftoverBolts, [MAILING ADDRESS] · Contact: [PRIVACY EMAIL]

1. Information we collect

Please don't put sensitive personal information in chat (health info, government IDs, account numbers, precise location, or other people's info).

2. How we use information

To provide and secure the Service; process payments; send transactional and required renewal/cancellation notices; respond to requests; comply with law; and improve future answers using the answer feedback described in §3. We do not use a third-party AI provider.

3. How we share information

We do not sell personal information and do not share it for cross-context behavioral advertising [CONFIRM — no ad pixels currently]. We disclose it only to:

• Stripe, Inc. — payment processing (Stripe's privacy policy: https://stripe.com/privacy).
• No third-party AI. Troubleshooting answers are generated by our own software. Your questions and answer feedback are not sent to any outside AI provider.
• Answer feedback (ratings and "what actually fixed it"). If you choose to rate an answer (helpful / not helpful) or type what actually fixed the problem, we collect: (1) your rating, (2) your optional free-text answer (up to 120 characters), (3) the problem area (for example, "brakes"), and (4) the vehicle or product make. We do not store this with your account, email, name, or cookie ID. It is saved only as running totals, such as "brakes / Ford / worn pads: 5 helpful, 1 not." We use it only to improve and rank future answers. When enough users report the same fix, that text may be shown to other users as a possible cause. We use your IP address briefly, in memory only, to limit how often feedback can be sent (to prevent spam). We do not save it with your feedback. Please don't include personal information in the free-text box (names, phone numbers, emails, addresses, VINs, license plates, or account numbers). We may delete or edit entries that contain such information. We keep feedback [RETENTION — Wayland to decide; proposed: up to 3 years from the last update, or sooner if you ask us to delete it]. Because it isn't linked to you, we may be unable to find a specific entry unless you tell us the exact text, problem area, and make. We do not sell or share feedback, and we do not use it for advertising.
• Hosting/infrastructure — [HOSTING PROVIDER], [EMAIL PROVIDER], [ANALYTICS, IF ANY].
• Legal/safety — when required by law or to protect rights and safety; and in a merger or sale of the business.

These providers act as our service providers/processors under contracts limiting their use of the data.

4. Cookies

We use [strictly necessary] cookies: a random identifier to count free-tier questions and remember Pro status. [No advertising or third-party tracking cookies. If analytics are added, update this section and add opt-out/GPC handling.] Stripe Checkout may set its own cookies for fraud prevention. We [honor Global Privacy Control signals].

5. Retention

• Troubleshooting questions: [30/90] days, then deleted or de-identified.
• Answer feedback: [RETENTION — proposed 3 years from last update, or until deletion is requested]; not linked to an account (see §3).
• Search logs: [90 days]; aggregated stats kept longer.
• Usage counters/cookies: [13 months].
• Billing records: as long as required for tax/accounting ([7 years]).
• DMCA notices: [3+ years].

6. Your choices and rights

You can request access, correction, deletion, or a copy of your information by emailing [PRIVACY EMAIL]. We will verify requests and respond within [45] days. Depending on your state, you may have additional rights (e.g., to opt out of sale/sharing, targeted advertising, or profiling, and to appeal a denial — reply to our decision to appeal). We won't discriminate against you for exercising rights. Authorized agents may submit requests with proof of authorization.

State-specific notices. At current scale, LeftoverBolts is not subject to the California Consumer Privacy Act or the Oklahoma Consumer Data Privacy Act (SB 546, effective Jan. 1, 2027). We still offer the rights described above to everyone. [ATTORNEY: re-check if we reach 100,000 consumers/yr or ~$26.6M revenue. Basis: CCPA, Cal. Civ. Code §1798.140(d)(1); OK SB 546 §15.]

7. Children

The Service is for users [18+ / 13+]. We don't knowingly collect personal information from children under 13. If you believe a child has provided information, contact [PRIVACY EMAIL] and we'll delete it.

8. Security

We use reasonable safeguards (HTTPS, limited access, provider security), but no system is perfectly secure.

9. International users

The Service is operated in the United States and intended for U.S. users. [ATTORNEY: GDPR/UK if marketing abroad.]

10. Changes

We'll post updates here and notify you of material changes by [email/in-app notice].

YouTube API Services [COUNSEL REVIEW]

Draft added 2026-10-28 by Wrench; pending Counsel/attorney review.

To suggest repair videos we send a search query built from your question (make, model, year, symptom; never your email or account ID) to the YouTube API Services. Search results are cached on our server for up to 7 days to reduce requests. Video thumbnails load from YouTube (i.ytimg.com). Videos play only when you click, through YouTube's privacy-enhanced domain (youtube-nocookie.com); once you play one, Google's privacy policy applies (https://policies.google.com/privacy). You can revoke any Google access via https://security.google.com/settings/security/permissions (we do not request access to your Google account).