Privacy Policy

This Privacy Policy explains how AT VirtuALL Services (“we”, “us”, or “our”) collects, uses, and protects information in connection with RepairDesk Pro(the “Service”). It applies to visitors to our public website and to businesses and their team members who use the Service.

1. Information We Collect

Account and profile information

When you sign up, we collect information such as your name, email address, phone number, and business/organization details.

Business information

Information about your business, such as business name, branch/store details, and team member roles.

Customer, device and job information

The Service is used by your business to record information you choose to enter about your own customers and their repair jobs — for example customer name, phone number, device details, job/complaint descriptions, estimates, invoices and payment records. This information is entered and controlled by your business, not by us; we process it on your behalf to operate the Service.

Authentication information

Login credentials and session information needed to authenticate you securely.

Usage and log information

Technical information such as device/browser type, IP address, and how you interact with the Service, used to operate, secure and improve it.

Website analytics information (public marketing site only)

When you visit our public marketing website (not the authenticated application), we record first-party pageview information: the page/path visited, timestamp, referring website (as a bare domain, e.g. “google.com”, never a full referring URL), a coarse device category (mobile/tablet/desktop), and a randomly generated, non-identifying visitor token stored only in your browser session (cleared when you close the tab). We do not use third-party analytics or advertising trackers, and we do not fingerprint your device.

Approximate location (derived from IP address)

From the same public-website visits, we derive an approximate country, region/state and city using your IP address against an offline geolocation lookup. This is never precise — it reflects the approximate location of your network connection, not your device’s actual location. We do not request or collect precise GPS/device location, and no browser location permission is ever requested by the Service. Your IP address itself is used only transiently, for this single derivation (and for short-lived abuse-rate-limiting), and is not stored alongside the derived location fields.

Referral/source information

Where available, we record which website referred you to ours (as a bare domain) and, internally, aggregate conversion signals (for example, that a visit was followed by starting a free trial) — used only in aggregate, never to build an individual profile of a specific visitor.

Service/security logs

Server and security logs (for example, request/error logs and audit trails of actions taken within your organization’s account) used to operate, secure, debug and audit the Service.

Support communications

Information you provide when you contact us for support, billing, or other enquiries.

2. How We Use Information

• To provide, operate, and maintain the Service;
• To authenticate accounts and secure access;
• To process billing and manage subscriptions;
• To communicate with you about your account, the Service, or support requests;
• To monitor, maintain, and improve the reliability and performance of the Service;
• To comply with applicable legal obligations.

3. Tenant/Business Data Isolation

RepairDesk Pro is a multi-tenant platform: each business’s data is logically isolated so that it is not visible to other businesses using the Service. Access within a business account is controlled by the roles and permissions your organization assigns to its team members.

4. Security

We apply reasonable technical and organizational measures intended to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Third-Party Service Providers

We use third-party infrastructure providers to help deliver the Service, in general categories such as cloud hosting, database services, authentication services, and transactional email delivery. These providers process information only as needed to provide their services to us and are not authorized to use it for their own purposes.

6. Cookies and Analytics

We may use essential cookies or similar technologies required for the Service to function, such as maintaining your logged-in session. Where analytics tools are used, they help us understand aggregate usage patterns to improve the Service.

7. Data Retention

We retain account and business data for as long as your account is active, and for a reasonable period afterward as needed to comply with legal obligations, resolve disputes, and enforce our agreements. We may also retain information for longer where reasonably necessary for tax or accounting requirements, fraud prevention, security, other legitimate legal claims, or regulatory obligations.

Job-card and repair-history data specifically is subject to your plan’s included, rolling retention window (24, 60, or a custom number of months depending on your plan), described in full in our Terms of Service, Section 6A (Data Retention Policy). That section also explains how this is separate from your plan’s media/ file storage capacity and from what happens if your subscription itself lapses. As of the date on this page, we have not activated automatic deletion of job-card or media data on the basis of elapsed retention; records exceeding your plan’s retention period may become eligible for deletion under a future, separately communicated process. Financial and legal records (such as invoices and payment records) are retained independently of job-card retention, as needed to meet our own legal and accounting obligations.

Paid subscription lapse. If an organization’s paid subscription lapses and is not renewed, the organization’s account and data become subject to the restricted-access, automatic-archive and eventual permanent-deletion lifecycle described in our Terms of Service, Section 8A. Under that lifecycle, a qualifying organization’s account and associated business/customer data may eventually be permanently deleted from our active production systems on a system-initiated basis, without requiring a separate deletion request from you at that stage. That section also explains the exceptions that apply — including for organizations that have only ever used a free trial, and for organizations archived manually rather than through an automatic subscription-lapse archive.

Backups and residual copies. Deleting data from our active production systems, whether at your request or through the lifecycle described above, does not necessarily remove every copy of that data instantly. Limited residual copies may temporarily remain in backups, logs, disaster-recovery systems, or similar protected systems until overwritten or deleted under our normal retention cycles, subject to applicable legal and security requirements. We do not treat such residual copies as active, customer-accessible production data.

Public-website analytics data (see Section 1’s “Website analytics information” and “Approximate location” entries) is retained as aggregated/derived records only — we do not store the IP address itself alongside those records.

8. Account Closure and Deletion

You may request closure of your account and deletion of associated data by contacting us at info@atvirtuallservices.com. We will act on verified requests in line with applicable law, subject to any information we are required to retain for legal or accounting purposes.

Account and data deletion is not limited to requests you initiate. As described in Section 7 above and in our Terms of Service, Section 8A, an organization whose paid subscription remains continuously lapsed and unrenewed for an extended period may have its account and data permanently deleted on a system-initiated basis, as part of our subscription-lapse lifecycle, independently of any deletion request from you.

9. Legal Obligations

We may disclose information where required to comply with applicable law, regulation, legal process, or a valid governmental request.

10. Your Rights

Depending on applicable law, you may have rights to access, correct, or request deletion of your personal information. To exercise these rights, contact us at info@atvirtuallservices.com.

11. Children’s Use

The Service is intended for business use by adults operating a repair/service business and is not directed at children. We do not knowingly collect personal information from children.

12. International Processing

Depending on the infrastructure providers used to deliver the Service, information may be processed in locations other than your own. Where this occurs, we expect providers to maintain appropriate safeguards for the information they process on our behalf.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Each published version is tracked internally by a version identifier; when you complete onboarding, our system records your acceptance of the specific Terms and Privacy Policy versions in force at that time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate, communicated to you directly.

This Privacy Policy is not legal advice. It describes our own data practices; it is not a substitute for independent legal advice about your own business’s data-protection obligations toward your customers.

14. Contact and Grievance

For privacy-related questions, contact info@atvirtuallservices.com. For escalations or grievances, contact support@atvirtuallservices.com. See our Grievance page for more detail.