Privacy Policy

Last updated: April 9, 2026

RepairOp ("we," "us," or "our") provides cloud-based repair shop management software as a service. This Privacy Policy explains how we collect, use, and protect information when you use the RepairOp platform, visit our website, or interact with us.

This policy applies to shop owners and staff who use RepairOp to manage their business. If you are an end customer of a repair shop that uses RepairOp, the shop's own privacy policy governs how your data is handled — RepairOp acts as a data processor on behalf of the shop.

1. Our Role: Data Processor vs. Data Controller

For shop customer data: When a repair shop uses RepairOp to manage their customers' information (names, phones, tickets, invoices), RepairOp acts as a data processor. The repair shop is the data controller — they decide what data to collect and how to use it. We process this data solely on their behalf and according to their instructions.

For shop owner/staff account data: When you sign up for RepairOp, we are the data controller for your account information (email, name, billing details). This policy describes how we handle that data.

2. Information We Collect

Account Information (Data Controller)

• Registration data: Business name, owner name, email address, phone number
• Billing data: Payment method, billing address, transaction history (card numbers are processed by our payment provider and never stored by us)
• Usage data: Feature usage, login activity, support requests
• Technical data: IP address, browser type, device information

Shop Customer Data (Data Processor)

• Customer records, tickets, invoices, estimates, and communications that shop owners enter into RepairOp
• Phone call logs, SMS messages, and voicemails processed through our telephony integrations
• We process this data only as directed by the shop owner (data controller)

3. How We Use Your Information

We use account information to:

• Provide, maintain, and improve the RepairOp platform
• Process billing and manage your subscription
• Send service announcements, security alerts, and support messages
• Respond to your support requests
• Monitor platform performance and security
• Comply with legal obligations

We do not use shop customer data for our own marketing, analytics, or any purpose other than providing the RepairOp service to the shop.

4. Third-Party Services

RepairOp integrates with third-party services to provide platform functionality. Data may be shared with these services as necessary:

• Payment processing: Stripe or Helcim (for subscription billing and shop payment processing)
• Telephony: Telnyx and/or Twilio (for phone and SMS services)
• AI services: OpenAI and/or Anthropic (for AI-assisted estimates — only device and service details are sent, no PII)
• Ticketing integration: RepairShopr (if configured by the shop for data sync)
• Infrastructure: PostgreSQL hosting, Cloudflare (CDN/security)

Each third-party service is subject to its own privacy policy. We select partners that maintain appropriate security and privacy practices.

We do not sell, rent, or trade any personal information to third parties.

5. Data Isolation and Security

RepairOp uses a database-per-tenant architecture. Each shop's data is stored in a completely separate database, providing:

• Complete data isolation: One shop's data is physically separate from another's
• Per-tenant encryption: Integration credentials are encrypted with AES-256-GCM
• Access controls: Role-based permissions within each shop
• Encrypted transmission: All data in transit is encrypted via TLS/HTTPS
• Regular backups: Automated database backups with point-in-time recovery
• Infrastructure security: Firewall protection, SSH key authentication, automated security updates

6. Data Retention

• Active accounts: Data is retained for the duration of your subscription
• After cancellation: Account data and shop customer data are retained for 30 days after cancellation to allow for reactivation, then permanently deleted
• Billing records: Retained for 7 years as required by tax regulations
• Support correspondence: Retained for 2 years after resolution
• Server logs: Retained for 90 days for security and debugging

7. Your Rights

As a RepairOp account holder, you have the right to:

• Access: View and export all your data at any time through the admin panel
• Portability: Export your complete database in standard formats
• Correction: Update your account and business information at any time
• Deletion: Request complete deletion of your account and all associated data
• Restrict processing: Request that we limit how we use your data

To exercise these rights, contact us at [email protected].

For End Customers of Repair Shops

If you are a customer of a repair shop that uses RepairOp, please contact the shop directly to exercise your privacy rights. As the data controller, the shop is responsible for responding to your requests. If the shop is unresponsive, you may contact us and we will assist in directing your request.

California Residents (CCPA/CPRA)

California residents have additional rights including: the right to know what personal information we collect; the right to delete personal information; the right to opt out of the sale of personal information (we do not sell personal information); and the right to non-discrimination for exercising privacy rights.

Virginia, Colorado, Connecticut, and Utah Residents

Residents of these states have similar rights under the VCDPA, CPA, CTDPA, and UCPA respectively, including rights to access, correct, delete, and obtain copies of personal data.

8. Data Processing Agreement

RepairOp is willing to enter into a Data Processing Agreement (DPA) with shop owners who require one for compliance with data protection regulations (e.g., GDPR, CCPA). Contact us at [email protected] to request a DPA.

9. Children's Privacy

RepairOp is a business-to-business service not directed at individuals under 18. We do not knowingly collect information from children. Repair shops using RepairOp are responsible for ensuring their own compliance with COPPA and other applicable regulations regarding minors.

10. Cookies and Tracking

RepairOp uses essential cookies for authentication and session management. We do not use third-party advertising cookies, tracking pixels, or analytics services that profile users across websites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify account holders of material changes via email. The "Last updated" date at the top indicates the most recent revision.

12. Contact Us

For privacy-related questions or requests:

• Email: [email protected]
• Website: repairop.com