Privacy Policy

Account information. Your email address, display name, role, tech ID and display preferences (such as highlight color). Passwords are handled by our sign-in provider and are never visible to us.

Shop work records. Repair orders and what staff add to them: RO number, tag, customer name, vehicle and VIN, service advisor, assigned technician, concern and repair notes, status, comments, change history and hours.

Access requests. If you request access, the email address you enter, plus the IP address and browser information sent with the request, so an admin can review it.

Basic usage data. Anonymous page-view statistics (pages visited, device and browser type) to keep the app working well.

The RepairsToDo Sync extension works only on myKaarma (app.mykaarma.com), Repairs To Do and Ford's OASIS parts pages (dealerconnection.com). On myKaarma it reads the signed-in technician's assigned repair orders from the route sheet (RO number, tag, customer name, vehicle, VIN, advisor and concern) and sends them to that user's Repairs To Do account. When the user asks to import a parts list for a VIN, it reads the parts list from the OASIS page.

The extension stores on your computer only what it needs to work: the technician name and tech ID you enter, your Repairs To Do sign-in token, sync status and whether a newer version is available. It does not read other websites, track your browsing, or send data anywhere other than Repairs To Do.

Only to run the shop's workflow: showing repair orders to the right technicians and staff, recording hours and changes, sending account emails (invitations, password resets, verification codes and security notices) and keeping the app secure.

We do not sell your data, use it for advertising, or use it to decide creditworthiness or lending.

We share data only with the services that run the app, and only for that purpose:

• Supabase: database, file storage and sign-in.
• Vercel: hosting and anonymous page-view statistics.
• Resend: delivering account and security emails.
• Cloudflare Turnstile: bot protection on the access request form.
• Google (Gemini API): reading parts invoices that an admin chooses to scan, to fill in parts details.

We may also disclose information if required by law.

Access is limited to invited shop staff, and what each person can see and change depends on their role. Data is encrypted in transit, and administrators can review and remove accounts.

Shop records are kept as part of the shop's work history. Account information is kept while your account is active. To have your account or data removed, ask a Repairs To Do administrator. Removing the extension deletes everything it stored on your computer.

If this policy changes, we'll update it here and change the date at the top.