Privacy Policy

1. Who we are

Repuvexa provides AI-assisted reputation management for local businesses. This policy explains what personal data we process and why. For questions, contact privacy@repuvexa.com.

2. Data we collect

• Account data — name, email, password hash, and organisation details.
• Business data — locations, brand voice settings, and connected profile identifiers.
• Review data — public reviews, ratings, and reply history for your locations.
• Customer data — names, emails, and phone numbers you add to request reviews.
• Billing data — subscription status and plan, held with our payment processor. We never store card numbers.
• Usage data — feature usage counts, AI generation events, and basic diagnostics.

3. How we use it

To operate your account, generate AI drafts, deliver review requests and weekly reports, enforce plan limits, provide support, prevent abuse, and meet legal obligations. We do not sell personal data and we do not use your customer lists for our own marketing.

4. AI processing

Review text, business context, and message drafts are sent to our AI provider to generate suggestions. This content is processed to return a response to you and is not used by us to train public models.

5. Processors we use

• Cloud database, authentication, and hosting infrastructure.
• An AI model gateway for content generation.
• An email delivery service for notifications, review requests, and weekly reports.
• A payment processor for subscriptions and invoices.

6. Retention

We keep account and business data while your subscription is active and for a limited period afterwards so you can reactivate. You can delete customers and locations at any time in the app, and you can request full account deletion by emailing us.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email privacy@repuvexa.com and we will respond within 30 days.

8. Your customers' data

When you upload customer contacts, you act as the data controller and we act as your processor. You confirm you have a lawful basis to contact those people and you must honour opt-out requests.

9. Security

Data is encrypted in transit and at rest, access is scoped per organisation with row-level security, and administrative access is limited to what is needed to operate the Service.

10. Changes

We will update this page when our practices change and adjust the "last updated" date above. Material changes will also be announced in the app.