FAQ
Questions, answered plainly.
Reference · 19 entries
Answered plainly
Section 01
Privacy & security
The core of the promise, who can reach your collection and who can’t.
01
Is my data safe?
Yes. Your collection is encrypted at rest, two-factor authentication is available on every account, and your data is never sold or shared. See our Trust page for the full commitment.
02
Is RepoNorth a registry? Do you report to the ATF or any agency?
No. RepoNorth is a private inventory tool, not a registry. We are not affiliated with the ATF, any government agency, or law enforcement, and we do not report your collection, your purchases, or your account to anyone. Nothing you enter is transmitted to any agency, automatically or otherwise. The only time we ever disclose data is under a valid warrant or court order, covered below.
03
Can law enforcement access my collection?
Only in response to valid legal process: a warrant or court order. We never hand over data on request alone, and we notify you whenever we’re legally permitted to. We publish an annual transparency report stating how many requests we received and complied with.
04
If it’s encrypted, how could you comply with a warrant at all?
Your collection is encrypted at rest, meaning it’s never stored in plaintext on disk, but we hold the keys, the same way your bank does. That’s a deliberate choice: it’s what makes password recovery and account support possible. We don’t claim “we can’t read it,” because a service that could never comply with a valid warrant couldn’t operate legally. What we commit to is narrower and just as real: we don’t look, we don’t sell, and we only ever decrypt under valid legal process. That restraint is built in, not just promised, our own admin tools show account details only, never your collection’s contents, and every decryption is logged.
05
Who at RepoNorth can actually see my collection?
By default, no one, including us. Your collection is encrypted at rest on US-based infrastructure, and our own admin tools show only account information, such as your email, plan, and billing status, never the contents of your collection. Decrypting a specific account is a deliberate, access-logged action taken only under valid legal process, never for casual browsing or support. The promise that we don’t look isn’t just policy; the everyday tools we use simply don’t expose what you’ve stored.
06
Do you sell data to insurers, advertisers, or manufacturers?
No. Never. There are no ads and no data brokers here. Your subscription is the entire business model.
07
Is my data used to train AI?
No. Your collection, your photos, and anything you enter are never used to train AI models, ours or anyone else’s, and never fed to third-party AI services. It’s your private inventory, not training data.
08
Has RepoNorth ever had a data breach?
The durable answer is how the service is built: the most sensitive fields, serial numbers, NFA control numbers, and storage locations, carry their own field-level encryption on top of encryption at rest, we collect the minimum needed to run the service, and no third parties receive your collection data at all. So even a breach of our systems would expose as little as possible. As of this writing, we have had none. If that ever changes, we will notify affected members promptly and explain exactly what happened, we won’t bury it.
Section 02
Your data & control
It’s your record. Take it, keep it, or leave whenever you want.
09
What information do I have to give to sign up?
Four things: your name, email, ZIP code, and a password, no phone number, no home address, no photo ID. The email is your login and how we reach you; the ZIP is five digits, not a street address, used to help verify new accounts and understand in aggregate where our members are. Your password is never stored in a form anyone can read, not even us, it’s kept as a one-way hash that can’t be reversed or handed over, even under a warrant. Everything past those four, item-level fields like storage location, purchase price, and personal notes, stays optional; what you don’t enter can’t be exposed.
10
What if I lose my 2FA device or forget my password?
You can recover your account. Because we hold the encryption keys, we can help you back in after verifying you own the account, rather than locking you out of your own collection forever. We strongly recommend saving your backup codes when you enable two-factor authentication, and keeping a recent export as a personal safety net.
11
Can I export everything and leave any time?
Yes. Full export in open formats (CSV/JSON), any time, with no waiting period. Delete your account and it’s gone within 30 days, including backups.
12
What happens if RepoNorth shuts down or is acquired?
Your data stays yours. If we ever wind down, we’ll give you clear advance notice and a full window to export everything before anything is deleted, no collection gets stranded. And if RepoNorth is ever acquired, the commitments on this page, no selling data, no ads, encryption, your right to export and delete, bind any successor. A change in ownership doesn’t cancel the promises we made to you.
Section 03
Plans, billing & features
What you get, what it costs, and what happens at the edges.
13
What happens if I stop paying?
Your account drops to the Free tier and nothing is ever deleted. If you’re over the Free tier’s 10-item limit, you keep full access for a 30-day grace period. After that your collection becomes read-only: you can always view and export every item, but adding and editing pause until you’re back under the limit or you resubscribe. You’re never locked out of your own data, and never held hostage to get it back.
14
Is there a free plan?
Yes. Up to 10 items and 10 ammo entries, no card required, no time limit.
15
Do you support NFA items like suppressors, SBRs, and SBSs?
Yes. NFA items get a structured registration timeline: control number, submitted date, approval date, plus an “awaiting ATF approval” tracker on Pro and above.
16
Can I share my collection with a spouse, gunsmith, or insurer?
Yes, on paid tiers. Read-only sharing lets you share specific items or your whole collection with someone, a spouse, a gunsmith, an insurer, and revoke it whenever you want. It’s separate from Emergency Access, which is for when you can’t grant access yourself. You stay in control of who sees what.
17
What is Emergency Access?
An opt-in feature (Pro and Platinum), off by default, that hands your collection to someone you trust if something happens to you, without ever putting us in the middle. You name a beneficiary and choose an inactivity window, say 90 days. If your account goes silent that long, we send you repeated warnings first; only if you never respond does your beneficiary get access, by confirming control of the exact email address you designated. There’s no death certificate to file and no judgment call for us to make, your own inactivity plus that email confirmation is the verification. You can cancel any time by simply logging back in.
18
How does the referral program work?
Share your personal link, found under Refer & Earn in the app, and your friend’s first month on any paid plan is free, delivered as a 30-day trial so nothing is charged up front. Once their first real payment goes through, you earn account credit equal to a month of their plan price. The credit applies to your next invoice and never expires. One condition: you need to be an active paying member at the moment their payment lands.
19
Is there a mobile app?
The app is installable as a Progressive Web App today, right from your phone’s browser. A true native iOS/Android app is an open question we’re considering for a future version.
Still have a question?
Read our full privacy commitment, or reach an actual person.