Legal
Privacy.
The short version: we store what the service needs to run, we don't run advertising trackers, we don't sell data, backups are encrypted, and you can export everything. The detail is below.
Last updated 13 August 2026.
1. What we store
- Account details — your name and email address. Passwords are stored hashed, never as the password itself.
- Your business data — products, customers, orders, invoices, payments, purchase orders and the files and photos you upload.
- WhatsApp messages — if you connect a number, messages your customers send it are processed and stored so they can become orders.
- Sign-in with Google — if you use it, Google shares your name and email address with us; nothing more.
2. Cookies
One cookie, and it keeps you signed in. Your theme choice is remembered in your own browser. There are no advertising or analytics trackers on this site or in the app.
3. Who can see your data
Your team, according to the roles and permissions you set. On our side, access is limited to what's needed to run the service and to help you when you ask for support. We do not sell data, and we don't use your business's data for anything except providing the service to you.
4. Third parties involved
- Email delivery — invoices, statements and notifications are sent through our email delivery provider, or through your own connected mailbox if you set one up.
- Online payments — if your business enables online invoice payment, the payment happens on the payment provider's own checkout page. Card numbers never touch RepBuddy's servers; we store the record that the invoice was paid.
- Google — only if you use Google sign-in, as above. The app also loads its typefaces from Google Fonts, which means your browser requests those files from Google.
5. Security
Everything is encrypted in transit — the site and the app are HTTPS-only. Servers sit behind a firewall. The database and uploaded files are backed up every night, encrypted, copied off the server and kept for fourteen days, and the restore path has been tested end to end.
6. Retention and deletion
Your data is kept while your account is active. Backups roll off after fourteen days. Deleting something permanently inside the product really deletes it. If you close your account: export what you want to keep, then ask us to delete the rest and we will.
7. Your rights
You can see, correct and export your data directly in the product. For anything the product doesn't cover — including deletion of the account itself — use the contact page.
8. Children
RepBuddy is business software and not directed at anyone under 16.
9. Changes
When this page changes, the date at the top changes with it, and meaningful changes will be flagged to account owners.