Privacy Policy

1. Introduction

Welcome to RepFlow ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our service at www.repflow.pro.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, display name, and profile photo when you sign in with Google
• Google Business Profile Data: Business locations, reviews, ratings, and related information you authorize us to access
• Payment Information: Billing details processed through Stripe (we don't store credit card numbers)
• Widget Configuration: Customization settings for your review widgets

2.2 Automatically Collected Information

• Usage Data: Widget impressions, clicks, and analytics
• Technical Data: IP address, browser type, device information, and access times
• Cookies: Authentication tokens and session management data

3. How We Use Your Information

We use your information to:

• Provide and maintain the RepFlow service
• Sync and display your Google Business reviews on your website
• Process payments and manage subscriptions
• Send service-related notifications and updates
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve our service
• Detect and prevent fraud or security issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

4.1 Service Providers

• Firebase/Google Cloud: Database and authentication services
• Stripe: Payment processing
• Vercel: Hosting and infrastructure
• Google APIs: Accessing your Google Business Profile data with your permission

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety.

4.3 Public Display

Reviews and ratings you choose to display via RepFlow widgets will be publicly visible on your website. This is the core functionality of our service.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure OAuth 2.0 authentication
• Regular security audits and monitoring
• Access controls and authentication for all systems

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us or deleting your account.

• Account Data: Retained until account deletion
• Review Data: Synced periodically; deleted when business locations are removed
• Analytics Data: Aggregated data may be retained for up to 2 years
• Payment Records: Retained for 7 years for tax and legal compliance

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data
• Revoke Consent: Disconnect Google Business Profile access at any time

To exercise these rights, contact us at privacy@repflow.pro or through your account settings.

8. Cookies and Tracking

We use cookies for:

• Essential Cookies: Authentication and session management (required)
• Analytics Cookies: Understanding widget performance and user behavior

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using RepFlow.

9. Third-Party Links

Our service may contain links to third-party websites (e.g., Google Business Profile). We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

10. Children's Privacy

RepFlow is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of RepFlow after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or our data practices, contact us:

14. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). Our legal basis for processing your data includes:

• Consent: You authorize us to access Google Business Profile data
• Contract: Processing necessary to provide our service
• Legitimate Interest: Improving our service and preventing fraud

15. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we don't sell your data)
• Right to deletion
• Right to non-discrimination for exercising your rights