REPSLog Data Security- Where My Data Is Stored and How It’s Protected?

This article explains where your REPSLog information lives, how it is protected, and who else sees any part of it.

Where your log lives

Your account, your entries, your properties and the files you attach are stored on Google Cloud (Firebase), the same infrastructure Google uses for its own products. All data is encrypted in transit and at rest. Access is controlled through industry-standard authentication and role-based permissions, and our staff can reach your content only where that is needed to run or support REPSLog.

Backups

We run daily automated backups with integrity checks, so that we can recover the service after a failure. A backup is kept for up to 60 days and then expires on its own. We do not restore a backup in order to bring back information you asked us to delete.

What we do with your log ourselves

We keep a copy of your entries and your properties in our own analytics warehouse and query it across accounts, to understand how REPSLog is used and to improve it. That copy includes the text of your entries and your property addresses. This is our own purpose rather than something we do on your instruction, and you can object at any time by contacting us, after which we stop using your log for it.

Who else holds part of your information

Running REPSLog means a number of outside providers hold a part of your information. Most of them work for us under contract; the advertising ones do not, and we say which:

• AI providers, for the AI features you use: the entry text we index, a file you attach if attachment search is on, and dictation audio. They may not use it to train their models. See the AI Features topic.
• Infrastructure and content delivery, which routes our requests and keeps a log of the AI requests we make on your behalf, including the content sent and the reply.
• Product analytics and session replay, which records how screens are used so we can find what is broken.
• Error and crash reporting, which records that something failed and for which account, along with your device's network address for requests to our servers.
• Property valuation lookup, which receives the street address of each US property you add so that a public estimate of its value can be looked up. It never receives your entries.
• Advertising platforms, for audience matching, which receive a hashed version of your email address and nothing else, so they can include you in or exclude you from our campaigns. They act under their own terms rather than under contract with us. See the Opt Out of Data Sharing topic.
• Advertising partners, for conversion measurement, which receive a record that you signed up, started a trial or bought: a hashed email address, an account identifier, the amount paid, and the network details your device sends with any web request. It never carries any part of your work log.
• Website analytics, which holds your account identifier against your sign-up, trial and purchase events.
• Push notifications, email delivery, customer support, payments and install attribution, each limited to what that job needs.

Smaller pieces go to address autocomplete when you type a property address, the sign-in provider you chose, the identity provider behind assistant and API connections, and, if you connect one, your calendar provider.

About session replay

We record how screens are used so that we can find and fix what is broken. What you type into a field is masked in the recording. Other text on the screen is not masked, and on the web neither are images. On the phone apps images are masked as well.

Tip: The full list, what each provider receives and how long it is kept, is in our Privacy Policy. This article is a summary, not the complete account.

What you control

• AI features. Settings > AI and privacy explains in plain language what each one sends, and lets you turn them off. Attachment search is off until you turn it on.
• Advertising. You can opt out of having your hashed email shared with advertising platforms. See the Opt Out of Data Sharing topic.
• Deletion. You can delete your account from the app at any time. See the Delete Account topic for exactly what is removed and what is kept.

If you have a question about any of this, contact us and we will help.