Last updated: May 4, 2026
Toolbox Repair, Inc. (“Toolbox,” “we,” “our,” or “us”) provides AI-powered home repair diagnosis through our website (toolbox.repair) and mobile applications (collectively, the “Services”). This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the rights you have.
By using the Services, you agree to the practices described in this Privacy Policy. This Privacy Policy addresses our data collection, use, and sharing practices. Our liability with respect to the Services, including AI diagnostic outputs, is governed by our Terms of Service, which you are encouraged to review alongside this Privacy Policy.
Information you provide directly:
Information collected automatically:
We use the information we collect to:
To diagnose repair issues, your videos, audio narration, photos, and text descriptions are processed by third-party artificial intelligence providers, including Anthropic and OpenAI, under enterprise agreements that prohibit the providers from using your content to train their general-purpose models. Processing may occur on servers operated by these providers and by our infrastructure partners (Amazon Web Services, Google Cloud, and Modal Labs).
You can request deletion of any submitted content at any time (see Section 8).
Our AI diagnostic feature uses automated decision-making technology to analyze your submitted content and generate assessments of repair issues and recommended actions. We do not use ADMT to make legally significant decisions affecting your creditworthiness, housing, employment, healthcare, or insurance eligibility. To ask questions about how our AI diagnostic models process your content in the interim, contact [email protected].
We create and use aggregated and anonymized datasets derived from user activity on the Services. These datasets describe patterns and trends — for example, the frequency of certain repair issues by region, season, home age, or appliance type — and do not identify any individual user, home, or address.
How we create these datasets: We remove direct identifiers (name, email, precise location, account ID) and aggregate the remaining data to a level where individual users cannot reasonably be re-identified. Where we publish or share datasets externally, we apply additional statistical techniques (such as minimum group sizes and noise injection) to prevent re-identification.
How we use them: We use these datasets to operate and improve the Services, conduct research and analytics, publish industry insights, and license the datasets to third parties such as insurance carriers, home warranty providers, appliance manufacturers, property management companies, and researchers. Revenue generated from licensing these datasets helps support the ongoing operation of the Services and contributes to keeping subscription pricing accessible to users. We do not license datasets in a manner that permits third parties to identify or contact you individually.
What this is not: We do not sell, license, or share videos, audio recordings, photos, names, email addresses, precise locations, or any other personal information that identifies you. We do not enable third parties to contact you based on these datasets.
Aggregated and anonymized data, once created, is not “personal information” under most privacy laws and may be retained and used indefinitely.
We do not sell your personal information. We may license aggregated and anonymized datasets that do not identify you, as described in Section 4. We share personal information only as described below.
When the Services determine that your repair issue requires a licensed professional and you choose to be connected to a pro, we share with Thumbtack: your name, contact information, approximate location, the category of work needed, and a summary of the diagnosis (so the pro arrives prepared). Thumbtack becomes an independent data controller of that information once it is shared, and Thumbtack’s own privacy policy applies. You can review it at thumbtack.com/privacy. Our agreement with Thumbtack requires them to: (i) use your information only to facilitate the professional referral and related services; (ii) not sell or license your personal information to unaffiliated third parties; (iii) maintain commercially reasonable security measures; and (iv) cooperate with deletion requests you submit to us that relate to information we have shared with them, to the extent technically feasible. Toolbox is not responsible for Thumbtack’s independent data processing activities following the point of transfer.
These providers are contractually bound to: (i) use your information only to provide services to us and for no independent commercial purpose; (ii) maintain commercially reasonable security measures to protect your information; (iii) not sell or share your personal information; (iv) flow down applicable data protection obligations to any approved sub-processors; (v) honor consumer privacy rights requests to the extent required by applicable law and consistent with our instructions; and (vi) notify us promptly of any security incidents involving your information. We periodically review our service provider agreements to confirm ongoing compliance with these requirements.
We may disclose information if required by law, subpoena, or court order, or to protect the rights, property, or safety of Toolbox, our users, or others.
If Toolbox is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
For any other sharing, we will ask you first.
We retain your information only for as long as necessary for the purposes described in this policy, after which we delete or anonymize it. Specifically:
| Data type | Retention period |
|---|---|
| Account information (name, email, profile) | For the life of your account, plus up to 30 days after account deletion for backup purges |
| Diagnostic content (videos, audio, photos, descriptions) | 90 days from upload, unless you choose to save a diagnosis to your history (in which case it is retained for the life of your account) |
| Diagnostic results (the AI’s written assessment) | For the life of your account |
| Subscription and transaction records | 7 years, to comply with tax and accounting laws |
| Customer support communications | 2 years from last interaction |
| Analytics and usage data | 14 months on a rolling basis |
| Marketing email subscribers | Until you unsubscribe, plus 30 days |
| Information shared with Thumbtack | Governed by Thumbtack’s retention policy once shared |
| Aggregated and anonymized datasets | Indefinitely (no longer personal information) |
You can request earlier deletion at any time (see Section 8).
We use industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest for diagnostic content, access controls, and routine security review. No system is perfectly secure. If we become aware of a security breach affecting your personal information, we will notify you and applicable regulatory authorities as required by applicable law. We will provide notice by email to your account address and, where required, by conspicuous posting on our website. Our notice will describe the nature of the incident, the categories of information affected, and the steps we are taking in response.
You have three independent controls in Settings > Privacy within the Toolbox app:
These choices apply going forward and do not require you to delete your account.
When you submit an opt-out request through Settings > Privacy or by emailing [email protected], we will send you a written confirmation of receipt within 10 business days and a confirmation that the opt-out has been applied within 45 days of your request. Confirmations will be sent by email to your account address. If we are unable to complete your request within 45 days, we will notify you of the reason and provide an expected completion date.
Regardless of where you live, you can:
To exercise any of these rights, email us at [email protected] or use the in-app “Delete my account” option in Settings. We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days. If we need additional time (up to an additional 45 days), we will notify you before the initial period expires and explain the reason for the extension. We may verify your identity before fulfilling certain requests; we will request only information reasonably necessary for verification and will not use it for any other purpose. If we deny your request in whole or in part, we will explain the reason in writing. You may appeal a denial by emailing [email protected] with the subject line “Privacy Rights Appeal.” We maintain records of all consumer requests and our responses for a minimum of 24 months, as required by California law.
California law gives you additional rights, including: the right to know what personal information we collect, use, disclose, and sell (including the right to access specific pieces of information and categories going back to January 2022, or the date we began maintaining that data if earlier); the right to request deletion; the right to correct inaccurate personal information; the right to limit the use and disclosure of sensitive personal information; the right to opt out of “selling” or “sharing” personal information for cross-context behavioral advertising; and the right not to be discriminated against for exercising any of these rights. Toolbox does not sell your personal information and does not share it for cross-context behavioral advertising as those terms are defined under California law. To exercise any of these rights, contact [email protected] or use the “Do Not Sell or Share My Personal Information” link in our website footer.
The Services are intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. When you create an account, we ask you to confirm that you are at least 16 years old. In compliance with the California Age-Appropriate Design Code (Cal. Civ. Code § 1798.99.28 et seq.), we apply privacy-protective default settings for users under 18 and limit data collection and processing to what is necessary to provide the Services to those users. If we learn that a user is under 16, we will promptly delete their account and all associated personal information. If you believe a child under 16 has provided us with personal information, please contact [email protected] and we will delete it.
Toolbox is based in the United States, and your information will be processed in the United States. If you are outside the U.S., the privacy laws of your country may differ from U.S. law.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have an account) or through an in-app notice at least 30 days before the changes take effect, and we will update the “Last updated” date at the top of this page. Your continued use of the Services after the effective date of any update constitutes your acceptance of the revised policy. If you do not agree to an updated policy, you must discontinue use of the Services before the effective date; access to and use of the Services after that date is conditioned on acceptance of the then-current policy. You may delete your account at any time as described in Section 9. We reserve the right to make non-material clarifications (such as typographical corrections that do not alter our substantive practices) without advance notice.
Toolbox Repair, Inc.
12605 Ventura Blvd., #1196
Studio City, CA 91604
Email: [email protected]
General contact: [email protected]
This Privacy Policy is governed by the laws of the State of California, without regard to its conflict-of-laws principles. Any dispute arising out of or relating to this Privacy Policy or our privacy practices — except claims arising under the California Consumer Privacy Act (Cal. Civ. Code Section 1798.100 et seq.) or other non-waivable statutory rights, which may be brought in any court of competent jurisdiction — shall be resolved by binding individual arbitration administered by JAMS under its then-current Streamlined Arbitration Rules and Procedures. Each party waives the right to participate in any class action, class arbitration, or other representative proceeding. Nothing in this section limits your right to lodge a complaint with any applicable supervisory or regulatory authority, including the California Privacy Protection Agency.
