Privacy Policy

To operate your account and collection, process billing through Stripe, respond to support requests, secure the Service against fraud and abuse, meet legal obligations (§9), and understand aggregate product usage so we know what to build next. We do not use your collection’s contents for anything beyond showing it back to you and anyone you deliberately share it with (§8).

If you add a mobile phone number and opt in, we use it only to send the account and security alerts described in our Terms of Service, never marketing, and never shared with third parties for their own purposes. We work with a messaging provider to deliver these texts; they act solely on our behalf to transmit the message and don’t use your number for anything else.

You can withdraw consent any time by replying STOP or from Account → Settings, and you can ask us to delete a stored phone number entirely, it’s also deleted automatically if you delete your account (§6).

Your collection is encrypted at rest (AES-256) and in transit (TLS). The most sensitive fields, serial numbers, NFA control numbers, storage locations, get a second layer of field-level encryption, with the key held outside the database, so a database copy alone doesn’t expose what you own.

Your password is stored only as a one-way hash, never in reversible form; authentication data lives in a separate store from your collection data. Two-factor authentication (standard TOTP) is available on every account and encouraged from day one.

We keep your data as long as your account is active. Delete your account any time from Account → Settings and it’s gone, including from backups, within 30 days. We recommend exporting first (§7); once deleted, we can’t recover it for you.

If anything here isn’t self-service yet, email [email protected] and we’ll help directly.

If you invite a Viewer, they can see the parts of your collection you’ve shared, read-only, until you revoke access, we don’t use that relationship for anything beyond enabling the view you set up.

Emergency Access works the same way: your named beneficiary’s email is used solely to verify their claim if your account goes inactive past the window you chose, after repeated warnings to you first. We don’t evaluate, mediate, or make judgment calls on these handoffs beyond the automated mechanism itself.

We respond to valid legal process only, a warrant or court order, never an informal request, and we notify you whenever we’re legally permitted to.

Disclosure, when legally compelled, runs through a single logged process: one named account is decrypted, the export is produced, and an immutable record is kept of who, when, and under which order. That log is exactly what populates our annual transparency report, published whether the number is zero or not.

RepoNorth is hosted on U.S.-based infrastructure. Backups are encrypted the same as primary data and retained on a 7-day rolling schedule.

RepoNorth is intended for adults 18 and older, consistent with our Terms of Service, and isn’t directed at children. We don’t knowingly collect information from anyone under 18.

We may update this Policy as the Service evolves. We’ll post the revised version here with a new effective date, and for material changes, we’ll make a reasonable effort to notify you directly.

Questions, or a request about your data? [email protected], or use our Contact page. For anything related to a legal request, see §9 or visit our Trust page.