Privacy Policy

1. Information We Collect

We collect the minimum data necessary to operate the platform:

• Account information: email, display name, and authentication tokens through Supabase Auth / Google OAuth
• Device information: manufacturer, model, serial numbers, and repair history you register
• Transaction data: repair records submitted by certified shops on your behalf
• Usage data: page views and feature usage for platform improvement. For signed-in accounts these events carry a stable account-associated identifier with contact fields stripped — they are pseudonymous, not anonymous, they require your analytics choice, and you can withdraw it at any time on Your Privacy Choices. A restriction on automated processing stops these captures outright.

2. How We Use Your Data

Your data is used exclusively to:

• Build and maintain your Device Passport — the cryptographically verifiable history of your device
• Connect you with certified repair shops you choose to engage with
• Improve platform reliability and detect fraud or policy violations
• Send transactional notifications (repair status updates, certification changes)

We do not sell, rent, or broker your personal information, and we do not share it for cross-context behavioral advertising. We do rely on service providers to operate the platform — payment processing (Stripe), email delivery, bot protection, error diagnostics, and object storage for the files you upload — each receiving only what the service you asked for requires, under contracts that bar them from using it for their own purposes. Optional processors (analytics, cloud AI features you enable) apply only with your choice, and a processing restriction on your account stops the optional ones. The full processor register lives in our Cookie Policy.

3. Data Storage & Security

Your core account data lives in our self-hosted PostgreSQL (Supabase stack) with encryption in transit and at rest; files and generated exports are stored in Cloudflare R2 object storage; the desktop app keeps local data in an encrypted (SQLCipher) store and the mobile app in the platform's encrypted storage. Payments are processed by Stripe, transactional email by our email provider, and operational errors reach Sentry with scrubbed payloads. Authentication uses industry-standard JWT tokens, and personally identifiable information is isolated from analytics data.

We do not hold a SOC 2, ISO 27001, or equivalent third-party security certification, and we will not claim one until an audit report exists that you can ask to see.

4. Your Rights

• Access: Export your account data in machine-readable JSON format. The export covers the account-level sources the platform stores for you and is being expanded to cover every data domain — see Data Rights for exactly which sources are included today.
• Correction: Update your profile and contact information at any time
• Deletion: Request full account and data deletion (30-day grace period)
• Portability: Device Passport data can be exported and transferred
• Opt out of sale or sharing: Record your instruction on Your Privacy Choices — no account needed

Exercising any of these rights will not change the price you pay, the service you receive, or the quality of support you get.

5. Opt-Out Preference Signals (Global Privacy Control)

We recognise and honour the Global Privacy Control (GPC) signal. When your browser, or a browser extension you have installed, sends Sec-GPC or sets navigator.globalPrivacyControl, we treat it as a valid request to opt you out of the sale and sharing of personal information. It is honoured automatically, on arrival, with no action needed from you, and we record that we honoured it. Our machine-readable declaration is published at /.well-known/gpc.json.

A browser signal, a browser extension, and the Do Not Sell or Share My Personal Information link in our footer are all accepted routes. You do not have to use more than one.

6. Contact

For privacy inquiries, contact privacy@repairyour.tech.