Privacy Policy

When you use Repontage, we collect:

• Account information: name, email address, and authentication data when you sign up (including Google OAuth data if you choose that method).
• Project data: URLs you submit and the AI-generated marketing content produced by the Service, including any competitor URLs you submit for competitor analysis (sent to our AI provider solely to generate the comparison report you requested).
• Usage data: pages visited, features used, credit consumption, and AI model interaction patterns.
• Technical / abuse-prevention data: we log your IP address transiently against rate-limited endpoints (free audit tool, registration, feedback widget, live-page tracking beacon) to enforce fair-use request limits. These records are automatically deleted on a rolling basis (see Section 4) and are never used to identify or profile you.
• Payment information: processed entirely by Paddle.com Market Limited; we do not store or have access to your full credit card details.
• Connected social accounts: if you connect X, LinkedIn, or Reddit for auto-posting, we store OAuth access/refresh tokens, your platform username, and the content you choose to post through the Service. You can disconnect any platform at any time from your dashboard, which deletes the associated tokens.
• Feedback: if you submit feedback via the in-app widget, we store your rating (1–5), optional message, category, and the page you were on. If you are logged in, feedback is linked to your account so we can follow up; you may also submit feedback anonymously.
• AI chat assistant history: conversations with the in-dashboard AI assistant are saved per project so they persist across sessions and devices. You can clear a project's conversation at any time from the chat panel, and it is permanently deleted when you delete the project.

We use your information to:

• Provide, maintain, and improve the Service.
• Generate AI marketing content based on your submitted project URLs.
• Track credit usage and enforce plan limits.
• Send service-related communications (account updates, billing notices, plan changes).
• Analyze usage patterns to improve our AI models and user experience.

We do not use your submitted URLs or generated content to train our AI models unless you explicitly opt in.

Your data is stored on Turso (libsql) databases with encryption at rest and in transit. AI processing is handled by DeepSeek API. We implement reasonable security measures to protect your personal information. However, no method of electronic storage or transmission is 100% secure.

Project data is retained indefinitely on all plans. Generated marketing content stays available as long as your account remains active. You can delete any individual project yourself at any time from the dashboard (delete button, two-step confirmation). This permanently removes that project's URL and all AI-generated content, including its live landing page. To delete your entire account and all associated data, contact us and we will process the request within 30 days.

IP address logs: IP addresses recorded for rate-limiting and abuse prevention (Section 1) are retained for a maximum of 24 hours before automatic deletion, with occasional exceptions up to a few days depending on when a background cleanup cycle runs.

We do not sell your personal information. We may share data with:

• Service providers: Paddle (payments), Vercel (hosting), Turso (database), DeepSeek (AI API), Google (OAuth authentication).
• Connected social platforms: X, LinkedIn, and Reddit, solely to publish content you explicitly request us to post on your behalf via those platforms.
• Legal obligations: when required by law, court order, or to protect our legal rights.

Public share links:if you choose to generate a share link for a project report, anyone who has that link can view the project URL and AI-generated marketing content on that page, without needing to log in. Share links are excluded from search engine indexing, but the link itself is not access-controlled. Only share links with people you intend to see the content. You control this entirely; a share link is only created when you click “Create share link.”

Live landing page: if the marketing pipeline generates a landing page for your project, it is published at a public, search-engine-indexable URL (repontage.com/site/{id}) using the AI-generated headline, copy, and your product URL. Unlike share links, this page is intended to be discoverable: it is designed to be a real, working asset you can link to. We record aggregate view and call-to-action click counts (and, if a traffic-source tag is present, a per-channel breakdown) via a tracking beacon on the page; this aggregate counter does not identify individual visitors. You can remove this page at any time by deleting the project from your dashboard.

Waitlist email capture:the live landing page and the public share report page each include an optional “Notify me”/launch-notification email form. If a visitor submits their email, we store it (associated with your project) so you can see and export the list of interested visitors from your dashboard Share panel, and so you (the project owner) can send them project updates and launch announcements directly through the Service (“newsletter broadcasts”), delivered via our email infrastructure or your own prefilled Gmail/Outlook draft when email delivery is not configured. Every broadcast we deliver on your behalf includes a one-click unsubscribe link pointing to our public /unsubscribepage; opting out is permanent and cannot be reversed by resubmitting the waitlist form, and future broadcasts automatically skip opted-out addresses. We deduplicate repeat submissions from the same address, we do not use these emails for our own marketing purposes, and we do not share this list with anyone other than you, the project owner. You can delete an individual visitor's email at any time from the Share panel (Remove button, two-step confirmation), or delete this data in bulk at any time by deleting the project. If you are the visitor and want your captured email deleted rather than just excluded from future sends, contact us at support@repontage.com Clicking “Unsubscribe” stops future broadcasts but, by itself, does not delete the stored address.

Optional visitor analytics (Google Analytics 4 / Meta Pixel):you may choose to enter your own GA4 measurement ID or Meta Pixel ID for a project. If you do, that tracking snippet is injected into your project's live landing page and will set third-party cookies and share visitor data (such as page views and clicks) directly with Google or Meta according to their own privacy policies. This feature is off unless you actively enter an ID, and you are responsible for ensuring your use of these third-party tools complies with applicable law (e.g. providing your own visitor-facing cookie notice if required in your jurisdiction). Repontage does not receive or store the analytics data these tags collect; it flows directly from the visitor's browser to Google/Meta.

Referral attribution:when a visitor signs up after opening one of your share links, we record which project link referred them so you can see how many signups your share link drove. Only the project id is stored on the new account. No other visitor data is collected. This attribution respects the visitor's cookie preferences where a cookie is involved.

Share reach analytics:when someone views your public report page or clicks its signup button, we record an aggregated view or click count for the project. If the visit arrived with a source tag (added by the sharing buttons we provide) or a referring site header, we store that source label (for example “x” or a referring domain) in an aggregated per-channel counter so you can see which platform drove the traffic. No personal data about the visitor is stored; these are simple counts per source.

We use the following types of cookies:

• Essential cookies: required for authentication, session management, and security. These cannot be disabled as the Service will not function without them.
• Analytics cookies: help us understand how visitors interact with Repontage. We use Vercel Analytics, which is privacy-friendly and does not collect personally identifiable information (PII) or use third-party tracking.

We do not use advertising or third-party tracking cookies. You can manage your cookie preferences at any time by clicking “Cookie Settings” in the footer, or by adjusting your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@repontage.com. We will respond within 30 days.

Legal basis for processing (GDPR, Art. 6): we process account and project data to perform our contract with you (providing the Service), based on your consent (where required, e.g. marketing communications), and on our legitimate interest in operating, securing, and improving the Service.

EU/EEA/UK users: if you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Korean users (개인정보보호법): you may request access, correction, deletion, or suspension of processing of your personal information by contacting us, and you may also file a complaint with the Personal Information Protection Commission (privacy.go.kr) or the Personal Information Dispute Mediation Committee.

Personal information manager (개인정보 보호책임자): pursuant to Article 31 of the Korean Personal Information Protection Act, our designated personal information manager can be reached at support@repontage.com for all inquiries regarding the processing of your personal information and the exercise of your rights.

Your data may be processed in countries where our service providers operate (US, China, EU). We ensure appropriate safeguards are in place for cross-border data transfers as required by applicable law.

The Service integrates with third-party services including Google OAuth, Paddle, and DeepSeek. Each has its own privacy policy. We encourage you to review their policies. We are not responsible for their practices.

The Service is not intended for users under 16. We do not knowingly collect data from children. If we learn we have collected such data, we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before taking effect.

For privacy-related inquiries or to exercise your data rights, contact us at support@repontage.com.