Privacy Policy

Last updated: 24 April 2026

RepuBot ("we", "us", "our") is operated by RepuBot Ltd. This policy explains how we collect, use, and protect your personal data when you use our service.

1. Who we are

RepuBot is a review management service that monitors your Google Business reviews and sends you AI-generated response drafts via WhatsApp. Our contact email is hello@repubot.app.

2. What data we collect

• Account data: your name, email address, venue name, postcode, and WhatsApp number — collected when you sign up.
• Payment data: processed by Stripe. We never store your card details.
• Google Business data: your Google reviews and business profile, accessed via the Google Business Profile API after you grant permission.
• WhatsApp messages: messages you send to our bot number, used to process your instructions (approve, edit, or skip review responses).
• Usage data: how many reviews we have processed for you in a billing period.

3. How we use your data

• To deliver the RepuBot service — monitoring reviews and sending you drafts via WhatsApp.
• To post your approved responses to Google on your behalf.
• To manage your subscription and billing via Stripe.
• To send you service-related communications (e.g. trial reminders, usage alerts).

We do not sell your data to third parties. We do not use your data for advertising.

4. Legal basis for processing (UK GDPR)

• Contract: processing your account data and reviews is necessary to provide the service you've subscribed to.
• Legitimate interests: service improvement and fraud prevention.
• Consent: connecting your Google Business Profile (you can revoke this at any time via your Google account settings).

5. Who we share data with

• Stripe — payment processing
• Supabase — database and infrastructure (hosted in the EU)
• Meta (WhatsApp) — to deliver messages to your WhatsApp number
• Google — to read your reviews and post responses via the Business Profile API
• Anthropic (Claude) — to generate AI response drafts (review text is sent for processing)

All processors are bound by appropriate data processing agreements.

6. Data retention

We retain your data for as long as your account is active. If you cancel, we delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

7. Your rights

Under UK GDPR you have the right to access, correct, or delete your data, restrict processing, and data portability. To exercise any of these rights, email us at hello@repubot.app.

8. Cookies

Our website (repubot.app) does not use tracking or advertising cookies. We use only essential session cookies required for the checkout flow.

9. Changes to this policy

We may update this policy from time to time. We will notify active users of any material changes via WhatsApp or email.

10. Contact

If you have any questions about this policy, email hello@repubot.app.