Every Verdict requires data. We tell you exactly which fields, why each one matters, and how long we keep them. No third-party data brokers. No marketing list. No surprise retention.
We don't ask for full names, mailing addresses, social handles, or dates of birth. We don't collect identifiers we don't need to ship a Verdict.
Not to insurers, not to shops, not to advertisers, not to data brokers, not to anyone. One transaction with you — $79, $129, or $199 — is the entire business model. The moment anyone else is paying us, the product is compromised.
Email-delivered claim links carry a 256-bit token. We store only the SHA-256 hash — never the raw token. A leaked database dump does not grant access to anyone's Verdict.
Supabase Postgres + Supabase storage handle encryption-at-rest. PDFs and photos uploaded for Full Verdicts live in private buckets with signed-URL access only.
Email smithperformanceproductions@gmail.com from the phone or email associated with your Verdict. We process deletion same business day. You lose access to the Verdict after deletion — that's the trade-off.
Every Verdict carries a permanent audit_trail_id. Same inputs always produce the same Verdict, byte-for-byte. That reproducibility is the credibility moat — it requires storing the inputs.
This is exhaustive. If a field isn’t in this list, we don’t store it.
Purpose: Decodes 40+ structured vehicle fields from NHTSA's vPIC API. Drives recall + complaint + TSB lookups against your specific vehicle, not a generic year/make/model average.
Retention: Stored with the Verdict permanently — so we can reproduce the same Verdict on demand from the same inputs.
Purpose: Anchors mileage-band clustering, Weibull hazard math, and predictive maintenance projections.
Retention: Stored with the Verdict permanently.
Purpose: The single customer identifier. Lets you retrieve a Verdict you bought, get reminders, and contact us. No marketing list. No SMS spam.
Retention: Stored as long as the Verdict exists. You can request deletion at any time.
Purpose: Used to deliver the Verdict via a single-use claim link. The claim token is 256-bit random; we store only its SHA-256 hash, never the raw token. The raw token exists only in the delivery email body.
Retention: Email is associated with the Verdict for the life of the Verdict.
Purpose: Adjusts regional labor-rate and parts-pricing baselines so the Verdict's cost spreads reflect your actual market.
Retention: Stored with the Verdict permanently.
Purpose: The customer-side complaint input. Sanitized and wrapped before being passed to the engine. Never injected raw into LLM prompts.
Retention: Stored with the Verdict permanently.
Purpose: The Full Verdict scores every line of your shop's quote. We OCR the PDF, extract line items, and score each one against platform patterns + regional pricing.
Retention: Stored in private Supabase storage, encrypted at rest. Linked to your Verdict via signed URL.
Purpose: Stripe handles the card transaction directly. RepairVerdict never sees or stores card numbers, CVV, or full billing address — only the payment confirmation + last-4 for receipt purposes.
Retention: Stripe's retention policy applies to the transaction; our side stores only the session ID + payment status.
You have access, correction, deletion, and portability rights. We don’t make them hard to exercise.