Privacy Policy
Last updated: August 10, 2026
1. Information We Collect
RepuShield does one thing: we look at the reviews on your Google Business Profile and file removal requests for the ones that break Google's published content policy. The list below is everything we collect.
- Account information (name, email address, password)
- Your business name and the public Google Business Profile listing it belongs to
- Review data read from that public listing (review text, star rating, reviewer display name, the date, and any public owner reply)
- Communications you send to us (support requests, feedback)
We do not collect payment card information. We never ask for a card, never see one, and store nothing of the kind. If you are ever charged, that happens on our payment provider's own checkout, where they act as Merchant of Record and handle the card themselves.
We do not ask for your Google account password, and you never hand us your account. Where you want us to act on your listing, you add our working address as a Manager on your Business Profile, which you can remove yourself at any time.
We also automatically collect certain information when you visit our site, including IP address, browser type, device information, pages visited, and referring URLs.
2. How We Use Your Information
We use the information we collect to:
- Read the reviews on your listing and score each one against Google's published content-policy categories
- Re-read your listing on a schedule you control, so new reviews get scored as they appear
- Draft the removal request we file with Google, and show it to you before anything is submitted
- Send you transactional email about your account, your audit, and the status of a filing
- Respond to your requests and provide support
- Detect, prevent, and address technical issues or fraud
We do not track sentiment or theme patterns, we do not benchmark you against competitors, and we do not write or publish replies to your reviews. Nothing is sent to Google, and no email goes out to a reviewer or customer, without a person on our side clicking send.
3. Data Sharing & Third Parties
We do not sell your personal data. We may share your information with:
- Service providers — hosting and database (Cloudflare), email delivery (Resend), public review data (Outscraper), AI text generation for drafting removal requests (Anthropic), and a payment provider acting as Merchant of Record if and when you are billed
- Google — the removal request itself, which by its nature names the review being disputed and the business disputing it
- Legal requirements — when required by law, regulation, or legal process
4. Google Data
The review data we work from is the public content of your Google Business Profile listing, the same content any visitor to Google Maps can see. We do not connect to your Google account through OAuth, we hold no Google access tokens, and we cannot read anything private in your Google account.
Where you have added our address as a Manager on your Business Profile so that we can file on your behalf, that access is granted by you inside Google's own interface and revoked by you the same way. Removing the Manager ends our access immediately.
5. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure password hashing (bcrypt), HMAC-signed tokens for sensitive operations, and role-based access controls. Your data is stored on Cloudflare's global network infrastructure.
6. Email Communications
We send transactional emails related to your account and services. Marketing emails require your explicit consent. Every marketing email includes an unsubscribe link. You can manage your email preferences in your account settings or unsubscribe at any time.
7. Cookies
We use essential cookies for authentication and session management. We may use analytics cookies (with your consent) to understand how our platform is used. You can control cookie preferences through your browser settings.
8. Your Rights
You have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Withdraw consent at any time
- Data portability — receive your data in a structured format
To exercise these rights, contact us at talha@repushield.app.
9. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days for legal and business purposes, after which it is permanently deleted.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. Continued use after changes constitutes acceptance.
11. Contact Us
For questions about this privacy policy or our data practices, contact us at talha@repushield.app.