Privacy Policy
Last updated: May 22, 2026
1. Information We Collect
When you use RepuShield, we collect information you provide directly to us, including:
- Account information (name, email address, password)
- Business information (business name, Google Business Profile data, review data)
- Payment information (processed securely through our payment provider — we do not store card details)
- Communications you send to us (support requests, feedback)
We also automatically collect certain information when you visit our platform, including IP address, browser type, device information, pages visited, and referring URLs.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Monitor Google Business Profile reviews 24/7 across your locations and notify you of new violations, negative reviews, review-bombing attacks, and rating drops
- Generate AI-drafted reply suggestions for individual reviews (using OpenRouter / DeepSeek)
- Track sentiment and theme patterns across your reviews
- Snapshot competitors' ratings and review velocities for benchmarking
- Generate monthly PDF reputation reports
- Analyze Google Business Profile reviews for policy violations and compute removability scores
- Send transactional emails (alerts, reports, billing, review requests)
- Process subscription payments via Lemonsqueezy
- Send marketing communications (with your consent, you can unsubscribe anytime)
- Respond to your requests and provide customer support
- Detect, prevent, and address technical issues or fraud
3. Data Sharing & Third Parties
We do not sell your personal data. We may share your information with:
- Service providers — Email delivery (Resend), hosting (Cloudflare), payment processing (Lemonsqueezy as Merchant of Record), review data (Outscraper), email deliverability verification (MillionVerifier), AI text generation (Anthropic / OpenRouter)
- Google — With your authorization, we access your Google Business Profile, locations, and reviews through Google's APIs, and (only where you explicitly enable it) post replies to reviews on your behalf
- Legal requirements — When required by law, regulation, or legal process
4. Google User Data & API Limited Use
RepuShield's review-management features use Google APIs. When you connect your Google Business Profile, you grant us access through Google OAuth — including the https://www.googleapis.com/auth/business.manage scope. We use this access only to:
- Read your business locations and their reviews
- Draft AI reply suggestions, and — only where you have explicitly enabled auto-reply — publish replies to reviews on your behalf
- Display your review and reply data inside your RepuShield dashboard
RepuShield's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not sell Google user data, we do not use it for advertising, and we do not allow humans to read it except where you explicitly request support, for security or abuse investigation, or where required by law. We use it solely to provide and improve the review-management features you signed up for. You can disconnect Google access at any time from your dashboard or from your Google Account permissions, which revokes our access going forward.
5. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure password hashing (bcrypt), HMAC-signed tokens for sensitive operations, and role-based access controls. Your data is stored on Cloudflare's global network infrastructure.
6. Email Communications
We send transactional emails related to your account and services. Marketing emails require your explicit consent. Every marketing email includes an unsubscribe link. You can manage your email preferences in your account settings or unsubscribe at any time.
7. Cookies
We use essential cookies for authentication and session management. We may use analytics cookies (with your consent) to understand how our platform is used. You can control cookie preferences through your browser settings.
8. Your Rights
You have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Withdraw consent at any time
- Data portability — receive your data in a structured format
To exercise these rights, contact us at privacy@repushield.com.
9. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days for legal and business purposes, after which it is permanently deleted.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. Continued use after changes constitutes acceptance.
11. Contact Us
For questions about this privacy policy or our data practices, contact us at privacy@repushield.com.