Who we are
Repperly provides review management software for local businesses. In this policy, “we” means Repperly and “you” means the business using it. You can reach us at hello@repperly.ai.
What we collect
We collect four kinds of data.
- Your account. The email address and password you sign up with, your business name, business type, city, state, phone number and website. Passwords are hashed by our authentication provider and are never visible to us.
- Your Google Business Profile data. If you connect Google, we read your business locations and your reviews, and we write replies to those reviews when you ask us to. See the section below.
- Your customers’ contact details. If you use review requests, you upload customer names, email addresses and phone numbers so we can send the request on your behalf. This data belongs to you; we process it only to send those messages.
- Billing information. Card details are collected and held by our payment processor. We store only a customer and subscription identifier and your subscription status. We never see or store your card number.
Google user data
When you connect your Google Business Profile, you grant Repperly access to your business listings and reviews. We use that access for exactly three things:
- reading your reviews so they appear in your dashboard;
- posting replies to reviews, either ones you approve or, if you switch auto-respond on, ones that meet the star rating rules you set;
- reading your existing replies so drafts can match how you write.
Repperly’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where you have asked us to help with a support issue, where it is necessary for security, or where the law requires it.
You can disconnect Google at any time from your settings page, which revokes our access. You can also revoke it directly from your Google account permissions page.
How we use AI
Review text, your business details and your previous replies are sent to our AI provider, Anthropic, to generate reply drafts and review request copy. Under our agreement with Anthropic, this data is not used to train their models. We do not send them your customers’ email addresses or phone numbers.
Who we share data with
We do not sell your data. We share it only with the processors that make the product work:
- Supabase — database and authentication hosting.
- Vercel — application hosting.
- Anthropic — AI text generation, as described above.
- Resend — sending email on your behalf.
- Twilio — sending SMS on your behalf.
- Square — subscription billing and card processing.
- Google — reading and writing your Business Profile reviews, and retrieving public information about competitors you add.
Your customers’ rights
Every review request email and SMS carries a one-tap unsubscribe. When someone opts out we record it and exclude them from all future messages permanently. If one of your customers contacts us directly asking to be removed, we will honour it and tell you.
How long we keep data
We keep your account data for as long as your account exists. If you cancel, your reviews remain on your Google Business Profile because they were always yours. Ask us to delete what Repperly holds and we will do it.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to particular processing. Email hello@repperly.ai and we will respond within the time the applicable law requires.
Security
Data is encrypted in transit. Access to production data is restricted, and database access rules scope each account to its own rows. No system is perfectly secure; if we ever become aware of a breach affecting your data we will tell you promptly.
Changes
If we change this policy materially we will update the date at the top and notify account holders by email.