Security and privacy

How your data and your licence are protected.

• Your data stays with you. The desktop app runs entirely on your computer. No sales data is sent to us.
• The only network traffic is the licence check (activation and renewal) and, if you choose, nothing else.
• Signed licences. Ed25519 signatures bound to the machine; verified offline. Renewals are authenticated and protected against replay.
• Encrypted backups (XChaCha20-Poly1305) and encrypted secrets such as repair passcodes and digital codes.
• Audit trail of sensitive actions: price overrides, cancellations, code reveals, delivering unpaid jobs.
• Access control on every screen and action, PIN lockout, rate limits on login and on the public repair status page.
• Uploads are limited to safe image types and re-encoded.
• An internal security review was done before release; its findings were fixed and covered by tests. It is not a substitute for an independent audit.