Privacy policy

Who is responsible for your data

Each repair shop using isitdone is the data controller for the customer information it records. The shop decides what is collected and why, and is responsible for handling it lawfully.

isitdone acts as the data processor, hosting and processing that data on the shop's instructions. For shop account data such as the owner's sign-in email and billing contact, the isitdone service operator is the controller. Privacy questions for the operator can be sent to support@isitdone.app.

What data shops store about customers

Depending on the repair, a shop may record your name, phone number and email address, device or item identifiers, custom intake answers, intake condition and photos, repair notes, estimates and approval decisions, payment state, and the status history of your repair. The shop is responsible for ensuring its custom intake questions collect only information needed for the repair.

Online bookings include your contact details, item and issue, chosen location and appointment. A private booking-management link allows rescheduling or cancellation for 48 hours; only a SHA-256 hash of its secret token is stored, and an expired link cannot access the booking.

If you leave a device PIN, password or unlock pattern so the shop can test the repair, it is stored encrypted at rest (AES-256-GCM), is visible only to that shop's staff behind an explicit reveal, is never included in data exports, and is removed when your customer record is anonymised. It is used solely to carry out and test the repair.

Tracking and repair-history pages use short-lived, HttpOnly signed cookies after ticket verification. Repair history can be opened for one hour and includes a sign-out control for shared devices.

This information is used to carry out the repair, contact you about it, take payment where enabled, and keep a record of the work and any warranty.

Service providers

The service operator selects the hosting and database providers used for an environment, currently a virtual-private-server provider or Vercel and a PostgreSQL provider. Infrastructure access is restricted to authorised operators, and database and uploaded-photo backups are retained according to the deployment schedule.

Optional providers are used only when enabled: Stripe for payment processing, Twilio for SMS delivery, the configured outbound SMTP provider for transactional email, and Sentry for error monitoring. These providers receive only the information needed for their service.

Retention

Shops keep repair records for as long as they need them for warranty, accounting and legal purposes, after which they are deleted or anonymised. Account data is removed when a shop closes its account, subject to legal retention requirements.

Operational data is pruned on a schedule: customer notifications are kept for 12 months, used or expired sign-in tokens for 7 days, and audit logs for 24 months. Production database and upload backups are retained for the 30 most recent scheduled archives unless the operator documents a different schedule.

Your rights

Under UK GDPR you have the right to access, rectify and erase your personal data, and to object to or restrict its processing. Because the shop is the controller, send repair-data requests to the shop that carried out your repair — it can fulfil them directly from its isitdone workspace.

You also have the right to complain to the Information Commissioner's Office (ICO).

Contact

Questions about this policy or about how the isitdone operator processes account data: email support@isitdone.app. For data about a specific repair, contact the shop first.