Privacy Policy

Last Updated: June 16, 2026

1. Introduction

At RepuLink, we take data protection and user privacy seriously. This Privacy Policy details how we collect, process, secure, and store data, including business location details, review platform integrations, and customer review content retrieved from public sources.

2. Information We Collect

We collect information in two main categories to provide and improve the Service:

  • Account Information: When you register for RepuLink, we collect your name, work email address, company name, and encrypted credentials. Payment transactions are processed securely through Stripe; we do not store raw credit card details on our servers.
  • Monitored Platform Data: We ingest public reviews, ratings, posting dates, and author identifiers from review platforms (Google Maps, Trustpilot, TripAdvisor, and Glassdoor) associated with the URLs linked to your locations.

3. GDPR Compliance & Privacy-First Anonymization

RepuLink is built with a privacy-first engineering architecture. Under the General Data Protection Regulation (GDPR), reviews published on public platforms contain personal identifiers (specifically names of authors). To protect customer privacy:

  • Data Anonymization at Ingestion: As soon as raw reviews are received by our ingestion servers, author names are automatically truncated to their first name and last initial only (e.g., "Jan van den Berg" is stored as "Jan v.").
  • Irreversible Hashing: The full original author name is immediately hashed using a secure cryptographic hash function (`SHA-256`) to create a unique identifier (`authorHash`). The raw, un-anonymized name is deleted and never written to our persistent database.
  • Anonymous Fallback: Glassdoor review authors are defaulted to "Anonymous Employee" in compliance with professional feedback protocols.

4. Customer Data Opt-Out

In accordance with GDPR rights, any individual who has written a review on Google, Trustpilot, TripAdvisor, or Glassdoor has the right to object to the processing of their data in our dashboards.

We provide a public, dedicated portal for review deletion at RepuLink Opt-Out Portal. Review authors can input their email or review identifiers to globally suppress and delete their review text from our databases, dashboards, alerts, and report exports.

5. How We Use and Share Information

We process data to deliver reputation monitoring dashboard metrics, run local AI sentiment and topic classification, send triggered notifications (Slack / Email alerts), and generate monthly PDF reports.

We do not sell, trade, or rent any customer reviews or account data to third parties. Data is only shared with trusted subprocessors necessary for service operations (such as Supabase for database hosting, Firebase for hosting APIs, Stripe for billing, and Google Generative AI for sentiment and reply generation).

6. Cookies

The Service uses standard session cookies (specifically the `__session` cookie) to maintain authenticated sessions and protect account data. Firebase Hosting CDN caches and transmits this session token to dynamic Cloud Function endpoints. No tracking or marketing cookies are used within our active dashboards.

7. Contact Us

For any questions regarding this Privacy Policy, your data rights, or our GDPR data ingestion architecture, please contact our Data Protection Officer at hello@repulink.co.