Privacy Policy

RepairCoreX ("RepairCoreX", "we", "us", "our") is a global cloud-based repair shop management platform. Our core operations are managed across the United States of America, United Kingdom (London), Singapore, United Arab Emirates (Dubai), and Bangladesh. We serve repair shop businesses and their customers worldwide.

As the operator of the RepairCoreX platform, we act as the data controller for personal information we collect from visitors, account holders, and platform users.

Contact us at any time: privacy@repaircorex.com

Account information: When you create an account, we collect your name, email address, business name, country, and billing information.

Business data: Data you enter into the platform about your customers, tickets, inventory, and transactions ("Business Data"). You remain the data controller for this information — we process it only on your behalf.

Usage data: How you interact with the platform — pages visited, features used, session duration, and error logs. This helps us improve the product.

Device and technical data: IP address, browser type, operating system, and device identifiers. We use this for security and analytics.

Communications: If you contact our support team, we retain those communications to help resolve issues and improve our service.

To provide and improve the Service: Operate the platform, process payments, send transactional emails, and develop new features.

To communicate with you: Product updates, billing notices, security alerts, and (with your consent) marketing emails.

For analytics: Understand how users interact with our product to make improvements. We use aggregated, anonymised data where possible.

For security and fraud prevention: Detect and prevent abuse, unauthorised access, and security incidents.

To comply with legal obligations: Retain records required by applicable law and respond to lawful requests from authorities.

We serve users globally, including in the European Union and European Economic Area. Where EU GDPR applies to our processing of your personal data, we rely on the following legal bases:

Contract performance: Processing necessary to deliver the Service you signed up for.

Legitimate interests: Security monitoring, fraud prevention, product analytics, and service improvement — where these interests are not overridden by your rights.

Legal obligation: Retaining records as required by applicable law.

Consent: Sending marketing emails. You can withdraw consent at any time by clicking "Unsubscribe" in any email or emailing privacy@repaircorex.com.

If you are located outside the EU/EEA, we still apply these same principles as our baseline standard for all users worldwide.

We do not sell your personal information. We share it only as necessary to provide the Service:

Service providers: Cloud hosting (AWS), payment processing (Stripe), transactional email (Postmark), SMS notifications (Twilio), and customer support tools. These providers act under our instructions and are contractually bound to protect your data.

Business transfers: If RepairCoreX is acquired by or merges with another company, your data may be transferred as part of that transaction. We will notify you before this happens.

Legal requirements: We may disclose information when required by applicable law or in response to lawful requests from governmental authorities.

With your consent: For any other purpose, only with your explicit consent.

We retain your account data for as long as your account is active, plus 90 days after termination to allow for re-activation.

After 90 days of account closure, we delete or anonymise your personal data, except where retention is required by applicable law (for example, financial records which may be subject to local tax retention requirements in your jurisdiction).

Usage logs and analytics data are retained in aggregated, anonymised form for up to 24 months.

We implement technical and organisational security measures proportionate to the risk, including: AES-256 encryption at rest, TLS encryption in transit, multi-factor authentication options for user accounts, access controls limiting data access to authorised personnel, and regular security reviews.

Despite these measures, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify affected users promptly and, where legally required, notify the relevant authorities.

Regardless of where you are located, we recognise and honour the following rights over your personal data:

Access: Request a copy of the personal data we hold about you.

Rectification: Request correction of inaccurate or incomplete data.

Erasure: Request deletion of your data, subject to any legal obligations to retain it.

Restriction: Request that we limit how we process your data in certain circumstances.

Portability: Receive your data in a structured, machine-readable format.

Objection: Object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, email privacy@repaircorex.com. We will respond within 30 days.

We use cookies and similar tracking technologies. See our Cookie Policy for full details.

Essential cookies: Required for the platform to function — these cannot be disabled.

Analytics cookies: Help us understand usage patterns. You can opt out via our cookie banner or your browser settings.

Marketing cookies: Used only with your explicit consent.

RepairCoreX is a globally distributed service. Your data may be processed in countries other than your own — including the United States (where our primary cloud infrastructure is hosted) and Bangladesh (where our core operations team is based).

These countries may have data protection laws that differ from those in your country. We take steps to ensure adequate protections are in place, including using providers who offer standard contractual clauses, data processing agreements, or equivalent safeguards.

If you are in the EU/EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers of your personal data outside the EEA.

We may update this Privacy Policy as our business, the law, or our practices change. We will notify you of material changes via email and by updating the "Last updated" date on this page.

Continued use of RepairCoreX after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.

For any privacy questions, requests to exercise your rights, or concerns about how we handle your data, contact us at: privacy@repaircorex.com. We aim to respond within 30 days.

If you are in the European Union or EEA and are not satisfied with our response, you have the right to lodge a complaint with your national data protection supervisory authority.

If you are in the United States, you may have additional rights under applicable state privacy laws (including CCPA for California residents). Contact us at privacy@repaircorex.com to exercise those rights.

For all other users, we will make reasonable efforts to resolve your concern promptly and fairly.