Privacy Policy

RepairBiz ("RepairBiz," "we," "us," or "our") provides cloud-based repair shop management software, including point of sale, repair ticketing, inventory, customer records, communications and bookkeeping tools (the "Service"). Our business address is 1091 Liberty Ave, Brooklyn, New York, NY 11208, United States. This Privacy Policy explains how we handle personal information when you (a) visit our public website, (b) create and use a RepairBiz account as a shop owner, employee or authorized user ("Account Data"), and (c) when your own customers interact with a portal or message we deliver on your behalf ("Shop Customer Data"). Two different roles. For Account Data we act as a business/controller. For Shop Customer Data that you upload or generate inside your account, you are the business/controller and RepairBiz acts as your service provider/processor, handling that data only on your documented instructions as described in our Terms of Service. If you are a customer of a repair shop that uses RepairBiz, please direct privacy requests to that shop; we will assist them in responding.

Information you give us • Account and identity details: name, business email, phone number, password credentials, role and permissions. • Business profile: legal or trade name, address, logo, tax rate, hours, policies and portal branding. • Billing details: subscription plan, billing contact, invoice history and the last four digits and expiration of a payment card. Full card numbers are collected and stored by our PCI-DSS compliant payment processor, not by RepairBiz. • Records you create in the Service: sales, invoices, quotes, repair tickets, device identifiers (IMEI/serial), trade-in records, uploaded receipts, photos, signatures, identification documents you choose to attach, employee records, payroll entries, and customer contact details. • Support communications: messages, attachments and phone/email correspondence. Information collected automatically • Device and connection data: IP address, browser and operating system, device fingerprint used for security and screen-lock features, timestamps. • Product usage data: pages viewed, features used, and actions recorded in your audit log. • Essential cookies and local storage used to keep you signed in and to remember printing and display preferences. Information from third parties • Authentication data from a sign-in provider you choose (for example Google), limited to your name, email address and account identifier. • Payment status and subscription events from our payment processor. • Delivery status from email and SMS providers you enable. Sensitive information. We do not ask you for government identifiers, biometric data, health data, precise geolocation or financial account numbers. Some shops choose to upload photos of customer identification. If you do, you are responsible for having a lawful basis and for complying with state identification and pawn/second-hand-dealer laws; you must not use those fields to collect data you are not permitted to hold.

We use personal information to: • create, secure and administer accounts and authenticate users; • provide the Service and its features, including generating invoices, tickets, reports and portal pages; • transmit notifications, reminders, receipts and marketing messages that you configure and send to your customers; • process payments, prevent chargebacks, and manage subscriptions and trials; • provide customer support and respond to your requests; • maintain security, detect and investigate fraud, abuse and unauthorized access, and keep audit logs; • maintain, troubleshoot and improve the Service, including aggregated and de-identified analytics; • send you service, security and billing notices, and (where permitted) product marketing you can opt out of at any time; • comply with law, respond to lawful requests, and establish, exercise or defend legal claims. We do not use Shop Customer Data to train third-party advertising models, and we do not use it for our own marketing.

We disclose personal information only as follows: • Subprocessors and service providers who host our infrastructure, deliver email and SMS, process payments, provide AI processing for features you invoke, and provide error monitoring. They are bound by written agreements limiting use to providing services to us. • Within your organization, to users and roles you authorize. Account owners can see records created by their staff. • At your direction, for example when you send a customer a receipt, portal link, payment link or marketing message. • Legal and safety, when we reasonably believe disclosure is required by law, subpoena, court order or other legal process, or is necessary to protect the rights, property or safety of RepairBiz, our users or the public. • Corporate transactions, in connection with a merger, financing, acquisition or sale of assets, subject to this Policy or a successor policy with notice to you. No sale or targeted advertising. In the preceding twelve months, RepairBiz has not sold personal information and has not shared personal information for cross-context behavioral advertising, and we do not knowingly do so for consumers under 16.

RepairBiz gives you tools to send SMS and email. You are the sender. You alone are responsible for complying with the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act, state telemarketing and Do-Not-Call laws, carrier and 10DLC requirements, and any consent, opt-out, quiet-hours and record-keeping obligations that apply to your messages. By using the messaging features you confirm that you have obtained the consent required by law from each recipient, that you will honor STOP/unsubscribe requests promptly, that you will identify your business in each message, and that you will not send prohibited content. We may suspend messaging features that appear to violate law, carrier rules or our Acceptable Use requirements.

Certain optional features (receipt and invoice scanning, content drafting, inventory suggestions, support assistance) send the content you submit to third-party AI providers for processing so that a result can be returned to you. Content submitted through these features is not used by RepairBiz to train our own models. AI output is generated automatically, may be inaccurate, and is provided for your review — you remain responsible for verifying amounts, tax treatment, legal text and any other output before relying on it.

We maintain administrative, technical and physical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest, role-based access controls, tenant data isolation rules, optional two-factor authentication and screen lock, audit logging of sensitive actions, and least-privilege access for our personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials, configuring roles appropriately, and promptly notifying us of suspected unauthorized access. If we become aware of a breach of security affecting your personal information, we will notify you without unreasonable delay and as required by applicable state breach-notification laws.

We retain personal information for as long as your account is active and for as long as necessary to provide the Service, comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements. Following account termination, business records are retained for ninety (90) days to allow reactivation and export, after which they are deleted or de-identified, except where a longer retention period is required by law or is necessary to defend a legal claim. Backup copies may persist for a limited additional period consistent with our backup cycle.

Depending on where you live, you may have the following rights under laws such as the California Consumer Privacy Act as amended by the CPRA, and comparable laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states: • Know/Access the categories and specific pieces of personal information we hold about you. • Correct inaccurate personal information. • Delete personal information, subject to legal exceptions. • Portability — receive a copy in a portable format. Account owners can export business records at any time from within the Service. • Opt out of sale, sharing for cross-context behavioral advertising, or profiling with legal effects. We do not engage in these activities. • Limit use of sensitive personal information. We do not use sensitive personal information for purposes requiring this right. • Non-discrimination for exercising any right. How to submit a request. Email privacy@repairbiz.store from the address associated with your account, or use the Support page. We will verify your identity using account information before responding, and will respond within forty-five (45) days, extendable once by an additional forty-five (45) days with notice. You may use an authorized agent with written permission. If we deny a request you may appeal by replying to our decision with the word "Appeal"; we will respond within sixty (60) days. California "Shine the Light." We do not disclose personal information to third parties for their own direct-marketing purposes. Nevada. Nevada residents may direct us not to sell covered information; we do not sell it. Do Not Track / Opt-Out Preference Signals. We do not use advertising or cross-site tracking cookies, so there is no targeted-advertising activity to opt out of.

We use only strictly necessary cookies and browser storage: session authentication, security and fraud prevention, and remembering your interface, printing and register preferences. We do not use advertising, retargeting or social-media tracking cookies. Blocking essential cookies will prevent the Service from functioning.

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18, and users must be at least 18 years old. If you believe a child has provided personal information to us, contact privacy@repairbiz.store and we will delete it. Shops must not use the Service to collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act.

RepairBiz is operated from the United States, and personal information is processed and stored on servers located in the United States and in other countries where our subprocessors operate. If you access the Service from outside the United States, you understand that your information will be transferred to, stored and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where a transfer mechanism is required by law, we rely on appropriate safeguards such as standard contractual clauses.

We may update this Privacy Policy to reflect changes in our practices or in the law. We will post the updated version with a new "Last updated" date and, for material changes, provide notice by email or in-app notice at least thirty (30) days before the change takes effect where required. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

Privacy requests and questions: privacy@repairbiz.store General support: support@repairbiz.store Mail: RepairBiz, 1091 Liberty Ave, Brooklyn, New York, NY 11208, United States This Policy is provided for transparency and does not constitute legal advice. Your own business remains responsible for its own privacy notices and compliance obligations.