This page lists security practices that RecoverPe actually uses today.
Need our security questionnaire or compliance details? Email support@recoverpe.com.
Read our Terms of Service, Privacy Policy and Cancellation & Refund Policy.
What we do
- Traffic between your browser and RecoverPe is encrypted in transit (HTTPS).
- Customer, invoice, and business rows live in Postgres with row-level security turned on. API routes check the signed-in account before they read or change a shop. The browser is not trusted for prices, plan limits, or permissions.
- Sensitive actions, including an owner saving an invoice past a customer's credit limit, are written to an audit log.
- Sign-in can use an authenticator app or SMS as a second step. An owner can require that second step for everyone who uses the business.
- Owners and accountants can download the books as a CSV or a Tally file from the app.
- Slack and Microsoft Teams webhook addresses are encrypted before they are stored, and the full address is not sent back to the browser. Alerts do not include customer phone numbers.
- The privacy policy names a DPDP grievance officer. Write to support@recoverpe.com with "Grievance" in the subject. The full process is on the Privacy Policy.
Sub-processors
These companies process data so RecoverPe can run. A shop's own email mailbox, if the shop connects one, is the shop's choice and is not listed here.
- Supabase — database.
- Vercel — application hosting, and analytics if you accept cookies.
- Google Firebase — sign-in, file storage, and the assistant model (Vertex / Gemini).
- Razorpay — subscriptions, checkout, and payouts.
- Resend — email RecoverPe sends.
- Fast2SMS — text messages.
- Meta — WhatsApp messages the shop asks RecoverPe to send, and a site pixel that loads only after cookie consent.
- Google Analytics — site measurement, only after cookie consent.
- Sentry — error reports, with secrets stripped before they are sent.
- Upstash — rate limits.
- Bolna — phone calls, when that feature is turned on for a shop.
Request a DPA
Dahikar Technologies Private Limited will send a data processing agreement on request. Email Request a DPA and we will reply from support@recoverpe.com.