SECURITY

Security and your data

Where your shop’s records are kept, how they are protected, and what Repair Karte does not have yet. The legal terms are in the privacy policy.

Where your data is stored

On servers in Japan, under strict management.
Each shop's data is kept separately, so one shop cannot see another shop's records.
There is no option to store data in the EU or the US.
Outside services we use (email delivery, card payments and so on) are listed in the privacy policy.

All traffic is encrypted with TLS (HTTPS).
Passwords are stored only as cryptographic hashes, never in plain text. Secrets such as your Stripe or messaging settings are stored encrypted.
Repeated failed sign-ins are limited, by IP address and by account.
The shop owner can require a one-time code sent by email at sign-in (two-step sign-in), with an option to remember a device for 30 days.
Two roles: owner and staff. Only the owner manages users and billing, refunds card payments, and restores or downloads backups.
Sign-ins, user changes, permission changes and similar events are recorded in an audit log.
Card numbers are handled by Stripe and never stored by Repair Karte.

Each repair's status page has its own link containing a random code (on Standard and Pro it is printed as a QR code on the claim tag). There is no customer login.
Customers can also look up their repairs by phone number; repeated lookups are limited.
Shop notes and check-in photos are not shown to customers.

Each shop's data is backed up automatically once a day, and backups are kept for 30 days.
The owner can make a backup at any time, download it, or restore the shop to an earlier backup from the Backup screen.
A deleted repair can be restored for 30 days.

Cancel at any time. When you cancel, we hand your data over.
On Standard and Pro you can also export repairs and the sales ledger as CSV yourself.

Found a security problem? Email info@repairkarte.com. About the operator: About Repair Karte.