Region:Ireland & Europe (EUR)United Kingdom (GBP)United States (USD)

Privacy Policy & GDPR

Last updated: October 2026 · EU data residency

1. Who we are

RepairDash is operated by Handy Planet OG, Goethestraße 3, 4020 Linz, Austria (EU) — UID: ATU77057845, FN: 555955g, Commercial court Linz. For GDPR purposes we act as the data controller for account and billing data, and as data processor for the customer data you enter into your RepairDash account (your customers, jobs and sales).

2. Data we process

Account data (name, email, company details, billing address) to run your subscription; usage data (login times, feature usage) to operate and improve the service; and, on your instruction, the customer/job/device data you enter to run your repair business. We do not sell any personal data.

3. Legal basis

Processing is based on performance of the contract with you (running the service you subscribed to), our legitimate interest (security, fraud prevention, service improvement), and, where applicable, your consent (e.g. optional marketing emails, which you can unsubscribe from at any time).

4. Where your data is stored

Our application runs on a server operated by World4You Internet Services GmbH (Linz, Austria) in an EU data centre. The database runs on MongoDB Atlas (MongoDB Ireland Ltd.) in the Frankfurt region (Germany). Backups run automatically. Personal data leaves the EU/EEA only where described in our sub-processor list, with adequate safeguards (EU Standard Contractual Clauses).

5. Sub-processors

Our current sub-processors are World4You (hosting, system and marketing email), MongoDB Atlas (database, Frankfurt) and Groq, Inc. (USA, AI text features, only when you use them). Services you connect yourself with your own contract (e.g. Twilio, SumUp, accounting tools) act on your instruction. The full list and our Data Processing Agreement are published at repair-dash.com/avv (German).

6. Your rights (GDPR)

You have the right to access, correct, export and request deletion of your personal data, and to object to or restrict certain processing. Requests can be made at any time from your account settings (export to CSV/Excel) or by emailing support@repair-dash.com; we respond within 30 days as required by GDPR.

7. Data retention

Account and customer data is retained for as long as your subscription is active, plus a reasonable period afterwards for legal/accounting requirements. You can request earlier deletion of your account and associated data at any time.

8. Cookies, Meta Pixel and registration measurement

Necessary cookies support the site. We do not use analytics tools such as Google Analytics. The Meta Pixel (Meta Platforms Ireland Ltd.) is loaded only after you accept it in the cookie banner; it then sets Meta cookies (_fbp, _fbc) and measures how our ads perform. Only with that same consent do we store the ad click ID in our cookie rd_fb (90 days) and, after you confirm your email address, report the completed sign-up to Meta from our server (Conversions API): your email address, first and last name, phone number and country are sent as a SHA-256 hash (pseudonymised), together with your IP address and browser identifier. Your account contents, repair jobs and your own customers’ data are never sent. If you decline, nothing is sent to Meta. Meta may transfer data to the USA; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time by clearing the stored cookie preference in your browser.

9. Security

Access to production data is restricted by role-based permissions, all traffic is encrypted in transit (HTTPS), passwords are stored only as bcrypt hashes, the database is encrypted at rest, and backups run automatically.

10. Contact & supervisory authority

Questions about this policy: support@repair-dash.com. Where GDPR applies, you may lodge a complaint with the relevant supervisory authority, including the Austrian Datenschutzbehörde. Rights under other applicable privacy laws may also apply.