Privacy Policy

What we store

• Shop records: the customers, devices, tickets, estimates, invoices, payments, inventory, appointments, photos and other files that a shop enters or uploads.
• Account data: staff names, email addresses, roles, hashed passwords, and sign-in and security settings.
• Logs: an audit history of changes made in the shop's account, and server logs such as sign-in attempts, IP addresses and errors, used to run and secure the service.
• Integrations: settings for the services a shop chooses to connect, such as file storage, calendars, payments or accounting. Secret credentials such as access tokens and API keys are stored encrypted.

How we use it

We use this data only to provide and support RepairForge for the shop, to keep the service secure, and to contact the shop about its account. We do not sell it and do not use it for advertising.

Who we share it with

We share data only with service providers that run parts of RepairForge, such as hosting, email and text message delivery, payment processing, error monitoring and bot protection on public forms, and only as needed for that work. The services a shop connects receive what the shop sends to them. We also disclose data when the law requires it.

Google user data

RepairForge's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

• When a shop connects Google Drive as file storage, RepairForge requests only the drive.file scope. With it, RepairForge can see only the files and folders it created itself. It cannot see or list anything else in the Drive.
• RepairForge uses this access only to store and read the files the shop's own RepairForge account creates, such as attachments, photos and documents. They are kept in a folder named RepairForge in the shop's Drive.
• For Google Drive, RepairForge stores only the Google refresh token, and stores it encrypted. Short-lived access tokens are kept only in memory.
• RepairForge does not use Google user data for advertising, does not sell it, and does not transfer it to third parties except as needed to provide this feature. No person at RepairForge reads it unless the shop asks for help, it is needed for security, or the law requires it.
• If a staff member connects Google Calendar, RepairForge requests calendar access and the account's email address so it can sync appointments with the calendar they choose. For Google Calendar, RepairForge stores both the access token and the refresh token, encrypted. The advertising, sale and Limited Use rules on this page apply to calendar data too, and disconnecting the calendar in RepairForge revokes that access.

Read the Google API Services User Data Policy

Disconnecting Google

To disconnect Google Drive, an admin first chooses another storage provider as the default (primary) one under Settings, then Storage, and then archives the Google Drive provider there. RepairForge archives it only once no active files are stored in it, and then stops using it. To remove RepairForge's access completely, remove RepairForge on your Google Account permissions page. Files already in the RepairForge folder stay in your Drive.

Open Google Account permissions

Microsoft user data

RepairForge does not use Microsoft user data for advertising, does not sell it, and does not transfer it to third parties except as needed to provide these features.

• When a shop connects Microsoft 365 or Outlook, RepairForge requests only the permissions it needs: Mail.Send, to send the shop's notification email from its own mailbox; Calendars.ReadWrite, to sync appointments with the calendar a staff member chooses; User.Read, to show which account is connected; and offline_access, to stay connected without asking you to sign in again.
• RepairForge uses this access only for those purposes. It does not read the mailbox: it cannot list, open or search messages, and it does not read contacts or files.
• RepairForge stores the Microsoft refresh token, and for Outlook Calendar also the access token, encrypted. For shop email, short-lived access tokens are requested for each send and are not stored.

Disconnecting Microsoft

To disconnect shop email, choose Disconnect under Settings, then Notifications; to disconnect the calendar, disconnect it in the calendar settings. RepairForge then deletes the stored tokens. To remove RepairForge's access completely, remove RepairForge on your Microsoft account's apps and permissions page. Work or school accounts can also be managed by the organization's administrator.

Open Microsoft account permissions

Retention and ownership

The data a shop enters belongs to the shop. We keep it while the shop's account is open, and the shop can export it. When a shop closes its account, we delete its data. Copies in backups are removed when those backups expire.

Changes to this policy

When this policy changes, we update this page and its effective date.

Contact

Questions about this page? Email us: dataforgesys@gmail.com