Legal

Privacy Policy

Last updated: May 2026

1. Data We Collect

We collect reviewer names, ratings, and review comments submitted to your business via the RepSafe intercept form, dashboard, or connected review platforms. We collect this data solely to provide the service: surfacing reviews, generating reply suggestions, and reporting on sentiment.

2. Account Data

For account holders we store your name, work email, organisation, and authentication credentials. Billing information is handled by our payments provider and is not stored on RepSafe servers.

3. Third-Party Processors

To deliver the service we share limited data with the following sub-processors:

  • OpenAI — review text is sent to generate AI reply suggestions and sentiment classifications.
  • Paddle — payment, billing, and tax processing as merchant of record.
  • Supabase — managed database and authentication infrastructure.

4. Compliance

RepSafe adheres to the New Zealand Privacy Act 2020 and applies GDPR principles for our UK and EU clients, including lawful basis for processing, data minimisation, and the right to access, rectify, or erase personal data.

5. Data Retention

Review data is retained for the duration of your subscription. On account closure, personal data is deleted within 30 days unless retention is required by law.

6. Contact

To exercise your data rights or ask questions about this policy, email hello@repsafe.online.