AutoRepairs sends local repair jobs to independent workshops with no commission. Here is exactly how it works, what data goes where, and how your members or your software can connect.
For each job, every business is scored the same way: it must offer the type of work; then covering the region, being verified, its customer rating and responding to most jobs add to the score. The top ten are matched. Equal scores are shuffled per job.
Plans, founding membership and member badges never change matching or ranking. We take no commission and sell no placements. A business a driver books by name is always included.
Businesses reply with a price range and availability. The driver picks who to connect with, up to three. Only then does the business get the driver's name and number.
The type of work, description, suburb, vehicle and photos. Never the driver's name, phone, email or address until the driver connects with that business. Number plates stay private.
A managed Postgres database in Sydney, Australia, with access rules enforced in the database. Sign-in is by one-time email code, so there are no passwords to leak. We do not sell personal information.
Each workshop has its own Stripe account and is the seller. Customers pay it directly; we never hold funds or see card numbers. Our fee is 0.5% per card payment, capped at $10.
An organisation can have its members show a badge such as "[Organisation] member" on their AutoRepairs profile and replies. We add a badge only after confirming membership with the organisation, and it is a fact about the business, like verification. It does not affect matching or ranking, and the organisation endorses nobody by taking part.
A workshop adds an https address in Business tools. We post JSON to it when:
Every post carries an X-AutoRepairs-Signature header: sha256= and the HMAC-SHA256 of the exact body, keyed with the workshop's secret. Reply 2xx within 5 seconds.
POST https://your-system.example/autorepairs
Content-Type: application/json
X-AutoRepairs-Event: job.matched
X-AutoRepairs-Signature: sha256=<HMAC-SHA256 of the body, hex>
{"id":"…","event":"job.matched","created_at":"2026-10-22T09:15:00+13:00",
"data":{"job_id":"…","category":"Diagnostics & electrical",
"description":"Engine light on, car hesitates when accelerating",
"suburb":"Pakuranga","region":"East Auckland","urgency":"week","driveable":"yes",
"vehicle":{"year":2014,"make":"Mazda","model":"3"},"url":"https://autorepairs.nz/#leads"}}// Node.js: check a post came from AutoRepairs
const crypto = require('crypto');
const expected = 'sha256=' + crypto.createHmac('sha256', SECRET).update(rawBody).digest('hex');
const ok = crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(req.headers['x-autorepairs-signature'] || ''));
No. Matching uses the same score for every business: whether it offers the type of work (required), covers the region, is verified, its rating, and whether it responds to most jobs. Plans, founding membership and member badges are not part of it.
The workshop. We take no commission, the driver deals with the workshop directly, and the workshop keeps the customer for future work.
In a managed Postgres database in Sydney, Australia. Access rules are enforced in the database itself, not just hidden in the app.
No. Each workshop has its own Stripe account and customers pay it directly. We never see card numbers or hold funds.
Invoices and payment records export as CSV, jobs can be sent to their own system as they happen, and anyone can ask our Privacy Officer for a copy of their information.