Privacy Policy

Updated: 28/10/2026

RepU AI (ABN 82 164 749 786) (“RepU”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and protect your information in accordance with applicable laws including the Australian Privacy Act 1988 (Cth), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

This policy applies to all users of our software platform (the “Service”), accessible via our websites, including but not limited to https://www.repu.ai, https://repu.page, https://repu.review, and associated web and mobile applications. It also covers our reviews widget and lead capture forms on our customers’ websites, and connections to AI assistants.

1. Information We Collect

We may collect the following categories of personal data:

1.1 Information You Provide Directly:

  • Business name and details
  • Content you upload
  • Contact information (name, email address, phone number)
  • Google Business Profile information
  • Payment details

1.2 Information Collected Automatically:

  • Cookies and similar tracking technologies
  • IP address and geolocation
  • Device and browser type
  • Usage data

1.3 Information from Third Parties:

  • AI-generated content using OpenAI APIs based on user-submitted content
  • Google account information (if connected via OAuth)
  • Review data from your Google Business Profile
  • Requests you make through any AI assistant you connect to RepU using the Model Context Protocol (MCP), such as ChatGPT, Claude, or Codex

1.4 Information Collected for Our Customers:

  • Details visitors enter in RepU lead capture forms on our customers’ websites, such as name and phone number
  • How visitors interact with the RepU widget, such as whether a form was shown or submitted

2. How We Use Your Information

We use your information to:

  • Authenticate and manage your account
  • Capture leads from your website and deliver them to you
  • Comply with legal obligations
  • Deliver customer messages and notifications
  • Generate AI-powered responses and landing pages
  • Improve the performance and features of the Service
  • Process payments for your subscription
  • Provide support and troubleshoot technical issues
  • Respond to requests you make through connected AI assistants
  • Retrieve and manage your Google Business Profile data
  • Show your Google reviews on your website through the RepU widget

We do not sell your personal information.

3. Legal Bases for Processing (GDPR)

For users located in the EU or UK, we process your data on the following legal bases:

  • Consent (e.g. optional marketing communications or AI-powered features)
  • Compliance with legal obligations
  • Legitimate interests (e.g. improving our platform, preventing fraud)
  • Performance of a contract (e.g. providing services you’ve subscribed to)

4. Sharing Your Information

We only share your personal data with third parties where necessary to deliver the Service:

4.1 Service Providers:

  • Amazon Web Services (AWS)
  • Google
  • IPinfo
  • Meta (Facebook)
  • OpenAI
  • Stripe

4.2 Businesses Using RepU:

Details a visitor enters in a RepU lead capture form are shared with the business whose website the form appears on.

4.3 AI Assistants You Connect:

You can connect RepU to any AI assistant that supports the Model Context Protocol (MCP), such as ChatGPT, Claude, or Codex. When you make a request through a connected assistant, we share the information needed to complete it with that assistant’s provider. Their use of that information is governed by their own privacy policies.

4.4 Legal and Regulatory Disclosures:

We may disclose your data where required to comply with laws, legal obligations, or valid government requests.

5. Use of Google Data

If you connect your Google account:

  • Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • We access and store data related to your Google Business Profile (including name, address, reviews, and replies).
  • We use this data only to provide features such as displaying reviews, generating replies, and creating AI-powered landing pages.
  • We share Google Business Profile data with a connected AI assistant only when you ask that assistant for it, and only to complete your request.

6. Use of AI Services (OpenAI)

Some features rely on OpenAI APIs to process user-provided inputs (e.g. reviews or business details) and generate outputs (e.g. replies or landing page content). By using these features:

  • You consent to the transfer of relevant content to OpenAI for processing
  • We only send the minimum necessary data
  • OpenAI does not use this data for training its models or any secondary purpose
  • If you do not wish for your content to be processed by OpenAI, you may choose not to use those features

7. Lead Capture on Our Customers’ Websites

When a business adds a RepU lead capture form to its website, we collect the details visitors enter on that business’s behalf.

  • The business decides what its form asks for and how it uses the details. It is responsible for telling its visitors how their information will be used.
  • We store lead details securely and make them available to the business in its RepU dashboard and email notifications.
  • If the business connects Google Analytics, the widget can record lead events, such as a form being submitted, in the business’s own Google Analytics account.
  • Lead details are kept while the business’s account is active, and the business can export them at any time.
  • Visitors who want to access, correct, or delete their details can contact the business directly, or contact us at support@repu.ai and we will help.

8. Data Retention

We retain your personal information:

  • For as long as your account is active
  • For a reasonable period after cancellation for legal or support purposes
  • You may request deletion of your data at any time (subject to legal and operational constraints)

Lead details collected through your forms are kept while your account is active, and you can export them at any time. When you close your account, we delete them within 30 days. We keep billing records after your account is closed, for accounting and tax purposes.

9. International Data Transfers

Some of our service providers store or process data in the United States, Europe, and other jurisdictions. We take reasonable steps to ensure your data is protected, including use of contractual safeguards and only partnering with providers who offer adequate privacy protections.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Delete your personal data
  • Object to or restrict processing
  • Receive a copy of your data in a portable format
  • Withdraw consent (where applicable)

To exercise your rights, contact us at: support@repu.ai

11. Children’s Privacy

Our Service is not intended for use by children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with information, please contact us and we will take steps to delete it.

12. Security

We implement appropriate technical and organisational security measures to protect your personal information. However, no system is 100% secure. You are responsible for safeguarding your account credentials.

13. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notifications. The updated version will always be posted at https://www.repu.ai/privacy/.

14. Contact Us

For privacy-related enquiries or data access requests, contact us at support@repu.ai.

Please also review our Terms of Service and Cookie Policy for more information on your use of the RepU platform.