Last updated: 6/26/2025

1. Introduction

Repto ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our review management service.

2. Information We Collect

Information You Provide

Account Information: Business name, email address, phone number, and password
Business Information: Google Business Profile details, business address, and category
Customer Information: Customer names and phone numbers that you provide for review requests
Payment Information: Billing details processed securely through Stripe

Information Collected Automatically

Usage Data: How you interact with our service, including SMS sent, reviews received
Device Information: Browser type, IP address, and device identifiers
Cookies: We use cookies to maintain sessions and improve user experience

Information from Third Parties

Google Business Profile: Review data and business information from your connected account
SMS Responses: Customer responses to review requests sent through our platform

3. How We Use Your Information

We use the collected information for:

Providing and maintaining our review management service
Sending SMS review requests on your behalf
Monitoring and displaying your Google Business reviews
Generating AI-powered response suggestions
Processing payments and managing subscriptions
Sending account notifications and service updates
Improving our service and developing new features
Complying with legal obligations

4. SMS Data Handling

Special attention to SMS-related data:

We store phone numbers securely and only use them for authorized review requests
SMS opt-out requests (STOP) are processed immediately and permanently
We maintain logs of all SMS communications for compliance purposes
Phone numbers are never sold, rented, or shared with third parties for marketing

5. Data Sharing and Disclosure

We may share your information with:

Service Providers: Twilio (SMS), Google (reviews), Stripe (payments), and Supabase (infrastructure)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with a merger, sale, or acquisition
Consent: With your explicit consent

We never sell your personal information to third parties.

6. Data Security

We implement appropriate security measures including:

Encryption of data in transit and at rest
Regular security audits and updates
Access controls and authentication
Secure data centers with SOC 2 compliance

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

Provide our services to you
Comply with legal obligations
Resolve disputes and enforce agreements

SMS logs are retained for 12 months for compliance purposes. You can request deletion of your account and associated data at any time.

8. Your Rights and Choices

You have the right to:

Access: Request a copy of your personal information
Correction: Update or correct your information
Deletion: Request deletion of your account and data
Portability: Receive your data in a machine-readable format
Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@repto.ai.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware of such collection, we will delete that information immediately.

10. International Data Transfers

Your information may be transferred to and processed in the United States. By using our service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information.

11. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will provide additional notice via email.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: privacy@repto.ai
Phone: +1 (646)-444-7724
Address: Repto LLC, United States

For general support inquiries, please contact support@repto.ai.