Security & Trust

How we protect your account and your photos.

Encryption

• All data is encrypted in transit (TLS) and at rest (AES-256-GCM on Cloudflare D1/R2).
• Passwords are stored only as salted PBKDF2 hashes — never in plaintext.

Isolation

Every customer's data lives behind a single, tested authorization boundary: one workspace can never read or write another's records or photos. This is enforced in code and proven by an automated cross-tenant test on every change.

Your data is yours

• We never sell or share your data.
• You can delete your account and everything in it at any time from Settings — this purges your rows and photos.
• Payments are handled by our payment processor; card data never touches our servers.

Reporting a vulnerability

Found a security issue? Please email security@reeveparts.com. We welcome good-faith research and will not pursue legal action for responsible disclosure. See security.txt.

On the roadmap

Multi-factor authentication and a formal SOC 2 program are planned as we grow.

Reeve. Back to the app