Privacy Policy

1. Overview

RepuVault LLC ("RepuVault," "we," "our," or "us") operates repuvault.com and the RepuVault software-as-a-service platform. This Privacy Policy explains how we collect, use, and protect your information when you use our services. By using RepuVault, you agree to the practices described here.

2. Information We Collect

Account information: Name, email address, and password when you create an account.

Business information: Business name, Google Maps Place ID, Yelp business ID, and location details you add to your account.

Review data: Publicly available reviews from Google and Yelp fetched on your behalf to power the RepuVault dashboard.

Usage data: Pages visited, features used, scan history, and alert preferences within the platform.

Payment information: Billing is handled entirely by Stripe. RepuVault does not store credit card numbers or payment details.

3. How We Use Your Information

• To provide the RepuVault service: monitor reviews, analyze sentiment with AI, and generate suggested responses.
• To send email alerts when new reviews match your notification preferences.
• To send transactional emails related to your account and subscription.
• To process payments and manage your subscription through Stripe.
• To improve the platform based on aggregate, anonymized usage patterns.
• To respond to support requests sent to hello@repuvault.com.

We do not sell your personal information to third parties.

4. Google API Services

RepuVault uses Google Sign-In (OAuth 2.0) for authentication and the Google Places API to retrieve publicly available business review data. Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We only request access to the minimum Google account information necessary to authenticate you (email address and profile name). We do not access your Gmail, Google Drive, or any other Google service beyond authentication and Places API data.

5. Third-Party Services

RepuVault integrates with the following third-party services to operate:

• Google — OAuth authentication and Places API for review data.
• Stripe — Payment processing and subscription management. Subject to Stripe's Privacy Policy.
• Supabase — Secure cloud database hosting for your account and review data.
• OpenAI — AI-powered sentiment analysis and suggested reply generation. Review text is sent to OpenAI solely to generate responses on your behalf.
• Loops — Email drip automation for onboarding and product communications.
• Resend — Transactional email delivery for alerts and notifications.

6. Data Retention

We retain your account data for as long as your account is active. Review data fetched from Google and Yelp is stored to power your dashboard history. If you delete your account, your personal data is removed within 30 days. Review data from public platforms may be retained in anonymized, aggregate form for service improvement.

7. Your Rights

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update your name and account details in the dashboard Settings page.
• Deletion: You may request deletion of your account and personal data by emailing hello@repuvault.com.
• Opt-out: You may disable email notifications at any time in your account Settings.

8. Security

We use industry-standard security measures including encrypted data transmission (HTTPS), secure authentication via Supabase, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take reasonable precautions to protect your data.

9. Children's Privacy

RepuVault is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@repuvault.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page with an updated effective date. Continued use of RepuVault after changes constitutes your acceptance of the updated policy.