Security & privacy at Ratchly
This page is maintained by the Ratchly team to answer common security and privacy questions about the Ratchly platform. It reflects current product behavior and is not an independent certification or third-party audit.
Access & authentication
Accounts are protected with email + password sign-in. Sessions are managed via secure tokens issued by our authentication provider. Owners control who has access to their shop's data and can remove team members at any time from the Team settings.
Data isolation
Each shop's data (customers, jobs, invoices, schedules) is scoped to that tenant. Row-level access rules in the database restrict reads and writes so one shop cannot see another shop's records.
Hosting & infrastructure
Ratchly runs on managed cloud infrastructure. Traffic to the application is served over HTTPS. The database, authentication, file storage, and serverless functions are provided by our backend platform (Supabase) and hosted on managed cloud regions.
What data we collect
To operate the product we store the records you create (customers, jobs, estimates, invoices, schedules, team accounts) and operational metadata (login events, error reports tied to your account). We use this data to deliver the service, support you, and improve reliability.
Subprocessors
We rely on a small number of vendors to run the product: a managed backend platform (Supabase) for database, auth, storage, and edge functions; Stripe for subscription billing and payments; Twilio for SMS; and an email delivery provider for transactional messages. We share only the data needed for each service to function.
Data export & deletion
You can export your customer records and other data from the app. If you want your account or shop data deleted, email support@ratchly.com and we will remove it within a reasonable period, subject to legal record-keeping requirements (e.g. retained billing records).
Reporting a security issue
If you believe you have found a security vulnerability, please email support@ratchly.com with details and reproduction steps. Please do not publicly disclose the issue before we have had a chance to investigate and respond.
Shared responsibility
Ratchly is responsible for the security of the platform we provide. You are responsible for the accounts you create, who you grant access to, the strength of the passwords you choose, and the accuracy of the records you enter. Together this keeps your shop's data safe.
Questions? Email support@ratchly.com or visit our about page.