Privacy Policy

Repmation LLC ("Repmation," "we," "us," or "our") provides review-request, private-feedback, and reputation-management tools for local businesses. This Privacy Policy explains how we collect, use, disclose, and retain personal information when people visit Repmation, create or use a business account, interact with a Repmation review page, submit private feedback, or contact us.

Our Role

For account administration, billing, support, marketing, security, and operation of our website, Repmation determines why and how personal information is processed. When a customer interacts with a review page created for a Repmation business customer or submits private feedback to that business, Repmation generally processes the information to provide services to the business. The business may access and use that information under its own privacy practices.

Information We Collect

• Business and account information: business name, industry, owner or account contact details, account credentials in hashed form, team-member names and roles, Google review URL, branding choices, uploaded logos, and logo-design request information.
• Review-page and feedback information: QR scans, review-page interactions, experience selections, Google review-link clicks, technician or team attribution, timestamps, and private feedback. Private feedback may include a customer name, contact information, and message when voluntarily provided.
• Signup and billing information: signup details, marketing-consent records, subscription status, Stripe customer and subscription identifiers, invoice or checkout status, and related billing records. Payment-card details are entered directly with Stripe and are not stored by Repmation.
• Communications: contact-form submissions, support messages, password-reset requests, mockup or design requests, and other communications sent to us.
• Device, usage, and security information: IP address, browser or device information, user agent, referring page, timestamps, session identifiers, necessary cookies, CAPTCHA verification data, rate-limit records, fraud or abuse signals, diagnostic information, and hashed or derived fingerprints used to detect duplicate or abusive submissions.
• Analytics information: information about visits and interactions with public pages when analytics is enabled, such as pages viewed, approximate location derived from IP address, device information, and referral source.

Sources of Information

We receive information directly from account owners, team members, website visitors, and customers submitting feedback; automatically from browsers and devices; from Repmation business customers that create team profiles or configure review pages; and from service providers such as payment, hosting, security, email, and analytics providers.

How We Use Information

• create, authenticate, administer, and support accounts;
• provide branded review pages and give customers the same Google review and private-feedback choices regardless of how they describe an experience;
• deliver private feedback to the applicable business and display it in the business owner dashboard;
• measure QR scans, review-link clicks, feedback activity, and team attribution;
• process subscriptions, invoices, and account changes through Stripe;
• send transactional emails, security notices, feedback alerts, billing notices, and support responses;
• send marketing messages when a recipient has opted in or when otherwise permitted by law;
• operate, troubleshoot, secure, analyze, and improve Repmation;
• prevent spam, duplicate submissions, fraud, abuse, and unauthorized access; and
• comply with law, enforce agreements, and establish or defend legal claims.

Customer Review Pages and Google

A Repmation review page may provide both a link to the business's Google review page and an optional private-feedback form. Repmation does not post a Google review for the customer and does not control information that Google collects after the customer follows a Google link. Google's own terms and privacy policy apply to activity on Google services.

Private feedback is shared with the business identified on the review page. Customers should not submit Social Security numbers, payment-card details, medical information, account passwords, or other highly sensitive information through a private-feedback form.

Cookies and Similar Technologies

Repmation uses cookies and similar technologies that are necessary for account sessions, security, signup continuity, and submission-rate controls. Owner and team-member authentication cookies are configured with security protections such as Secure, HttpOnly, and SameSite settings where applicable. We may also use analytics technologies, including Google Analytics when enabled, to understand use of public pages. Browser settings can block cookies, but doing so may prevent login or other features from working correctly.

How We Disclose Information

We may disclose personal information as needed to provide and protect the service, including to:

• Repmation business customers: private feedback, related customer-provided contact information, review-page activity, and team attribution for their own account.
• Cloud infrastructure and security providers: including Cloudflare for website delivery, serverless computing, database and object storage, network security, and CAPTCHA services.
• Payment providers: Stripe for checkout, subscriptions, invoices, payment processing, and billing-portal services.
• Email and marketing providers: Resend for transactional email and Mailchimp for marketing contacts that have opted in.
• Analytics, content, and utility providers: providers used for website analytics, QR-code generation, and administrative content generation. These providers receive only the information reasonably needed for the applicable function.
• Professional advisers and authorities: when reasonably necessary for legal, accounting, security, compliance, or dispute-resolution purposes, or when required by law.
• Business transactions: in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate protections.

Sale and Targeted Advertising

Repmation does not sell personal information for money. We do not knowingly use personal information for cross-context behavioral advertising. When analytics is enabled, we use it to measure and improve Repmation rather than to serve behaviorally targeted advertisements.

Data Retention and Account Deletion

We retain information for the period reasonably necessary to provide the service, maintain account and billing records, support business customers, prevent abuse, meet legal obligations, resolve disputes, and enforce agreements. Retention depends on the type of information and why it was collected.

Repmation's automated retention process is scheduled daily and applies the following standard targets:

• abandoned signup drafts are deleted after seven days; checkout attempts that remain unfinished for 48 hours are marked expired, and expired checkout drafts are deleted after an additional 30 days;
• authentication and public-form rate-limit counters are deleted after one day;
• expired or revoked owner and technician session records and password-reset requests are deleted after 30 days;
• IP addresses and browser or message fingerprints stored with private feedback are removed after 30 days, while the feedback itself remains available to the applicable business until account deletion or another applicable retention event;
• IP addresses and user-agent data stored with contact and mockup requests are removed after 30 days, and those public lead records are deleted after 18 months;
• IP addresses and user-agent data in administrative audit records are removed after 90 days;
• IP addresses and user-agent data associated with legal acceptance evidence, and IP addresses associated with marketing-consent evidence, are removed after one year while the underlying version, timestamp, source, and consent or acceptance record is retained; and
• Stripe webhook processing records are deleted after two years.

These are standard operational targets rather than guarantees of deletion at an exact minute. A temporary outage, backup cycle, investigation, legal hold, dispute, fraud-prevention need, or legal obligation may delay or limit deletion or anonymization.

When Repmation approves and completes a permanent business-account deletion, we delete the business profile, owner and technician accounts, active and historical Repmation session records for the business, password-reset requests, signup remnants, private feedback, review-activity records, related acceptance records, and Repmation-hosted logo objects associated with that account. Archiving or canceling a subscription does not by itself permanently delete the account or its data.

We may retain limited billing, transaction, security, fraud-prevention, legal, or administrative audit records when reasonably necessary or required by law. Stripe, email, analytics, and other service providers may retain records under their own legal, security, and operational requirements. We may also retain deidentified or aggregated information that cannot reasonably identify an individual.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, hashed passwords, protected session cookies, rate limits, CAPTCHA, and transport security. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

Your Choices and Privacy Requests

You may ask us to provide access to, correct, delete, or provide a copy of personal information associated with you. Authenticated Repmation account owners may download a JSON copy of business-account data from the Privacy & Account Data section of the Business Profile page. The export excludes passwords, password hashes and salts, authentication and reset tokens, session tokens, and checkout secrets for security.

You may also withdraw marketing consent or unsubscribe through a marketing email. We may need to verify your identity and may deny or limit a request when permitted by law, including when information must be retained for security, fraud prevention, billing, legal compliance, or legal claims.

If your request concerns private feedback or other information processed for a Repmation business customer, contact that business first when practical. Repmation may refer the request to the business or assist the business in responding.

Residents of certain jurisdictions may have additional rights under applicable law, which may include rights to know or access information, delete information, correct inaccuracies, obtain a portable copy, opt out of certain disclosures or targeted advertising, and receive equal service when exercising privacy rights. Repmation does not discriminate against anyone for making a valid privacy request.

Submit correction, deletion, or other privacy requests through the contact page or email [email protected] with the subject line "Privacy Request."

International Processing

Repmation is operated from the United States. Information may be processed in the United States and other countries where our service providers operate. Those countries may have privacy laws that differ from the laws where a person lives.

Children

Repmation is a business service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. A parent or guardian who believes a child has provided personal information may contact us to request deletion.

Changes to This Policy

We may update this Privacy Policy to reflect changes to Repmation, our providers, or applicable law. We will post the revised policy on this page and update the date above. Material changes may also be communicated through the service or by email when appropriate.

Contact

Questions or privacy requests can be sent through the contact page or by emailing [email protected].