Privacy Policy

1. Our Commitment to Privacy

At RepuShield AI (“Company”, “we”, “us”), we handle two categories of sensitive information: your business account data, and the private customer complaints we intercept on your behalf. Both are treated with the highest standard of security and confidentiality. This Privacy Policy details what we collect, how it is processed, and your rights.

2. Information We Collect

We collect only information strictly necessary to provide the RepuShield service:

• Business Account Data: Name, work email, company name, and Google Business Profile review URL.
• Intercepted Customer Feedback: Star ratings, customer names (if provided), emails, phone numbers, and written complaint text submitted through your review gate. This data is stored exclusively in your private workspace.
• Telemetry Counters: Aggregated counts of positive redirects and intercepted complaints per location. No individual customer identity is tracked for positive clicks.
• Billing Information: Payment processing is handled by Lemon Squeezy. We do not store raw card numbers.

3. AI Processing Guarantees

When de-escalation drafts are generated, complaint text is transmitted over encrypted TLS 1.3 channels to isolated inference infrastructure operating under strict enterprise data handling agreements prohibiting prompt retention for training.

4. Data Storage & Security Architecture

All feedback submissions, business settings, and profiles are stored in private PostgreSQL instances managed via Supabase with row-level security (RLS) policies ensuring complete workspace isolation.

• Encryption at Rest: All data volumes and backups are encrypted using AES-256 standards.
• Encryption in Transit: All traffic between browsers and databases is secured via TLS 1.3.
• Row-Level Isolation: Intercepted customer feedback is strictly accessible only by the authenticated business owner who owns that location.

5. Subprocessors

We partner with the following enterprise infrastructure vendors:

6. Your Rights (GDPR & CCPA)

Regardless of location, all users have the following rights:

• Right of Access: Request a complete export of your account data and all intercepted feedback submissions.
• Right to Erasure: Delete your workspace, business locations, and all associated customer submissions permanently at any time.
• Right to Data Portability: Export intercepted feedback as CSV for your own records.

7. Contact Our Privacy Team

For data subject access requests, deletion requests, or compliance inquiries, contact our Data Protection Officer at privacy@repushield.ai.