Privacy Policy

SkyBlueMedia operating as Reputify (“we,” “us,” or “Company”) is committed to protecting the privacy of our clients and their customers. This Privacy Policy explains how we collect, use, store, and share information when you use Reputify at reputify.co.

1. Data We Collect

We collect the following categories of data:

Business Owner Account Information

• Name and email address (provided during account setup by SkyBlueMedia)
• Business name, logo, and branding preferences
• Google review URL for your business
• Notification email addresses

Customer Ratings and Feedback

• Star rating (1–5) submitted by customers via QR code, link, or email
• Feedback text submitted by customers who rate 1–3 stars (private, never published)
• Whether a customer clicked through to leave a public Google review
• The source of the interaction (QR code, email link, direct link, etc.)

Optional Customer-Provided Information

• Customer name (optional, collected only when a customer voluntarily provides it on the feedback form)
• Customer email address (optional, collected only when a customer voluntarily provides it to allow follow-up)

Technical Data

• IP addresses: collected and immediately hashed (one-way cryptographic hash) for rate-limiting purposes only. We do not store raw IP addresses.
• Session data: minimal session cookies used for authentication of business owner accounts (see Cookies section)
• Usage analytics collected via Google Analytics on public-facing pages (landing page, blog)

2. How We Use Your Data

We use the data we collect to:

• Provide, operate, and improve the Reputify Service
• Display your business's feedback and analytics in your dashboard
• Send email notifications to your designated addresses when negative feedback is received
• Generate monthly performance reports
• Enforce rate limiting to prevent abuse of the public-facing rating form
• Communicate with you about your account, billing, or changes to the Service
• Analyse aggregate, anonymised usage patterns to improve the product

We do not use your customers' feedback or contact information for our own marketing purposes.

3. Data Storage

Your data is stored in a PostgreSQL database provided by Supabase, hosted on Amazon Web Services (AWS) infrastructure in the EU region. We use Supabase's Row Level Security (RLS) feature to ensure that your business's data is isolated from data belonging to other businesses on the platform.

Data in transit is encrypted using TLS. Data at rest is encrypted by our database provider.

4. Data Sharing

We do not sell, rent, or trade your data or your customers' data to any third party. We share data only with the following service providers, and only to the extent necessary to provide the Service:

• Supabase — database hosting and authentication (EU-based AWS infrastructure)
• Vercel — application hosting and infrastructure
• Resend — transactional email delivery (used to send negative feedback notifications to your team)
• Anthropic — AI reply suggestions (where the AI-assisted reply feature is used; only the relevant feedback text is sent, not personal customer information)

Each of these providers is subject to their own privacy policy and data processing agreements. We do not authorise them to use your data for their own purposes beyond providing their services to us.

5. Cookies

We use cookies in two contexts:

• Authentication cookies: Session cookies are set when a business owner or agency admin logs in to the dashboard. These are strictly necessary for the Service to function and expire when you log out or close your browser.
• Google Analytics cookies: On public-facing pages (our landing page at reputify.co and the blog), we use Google Analytics to understand how visitors find and use our site. These cookies do not apply to your customers' experience on your branded rating pages (/r/[your-slug]).

We do not use tracking cookies for advertising or retargeting. You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

6. Data Retention

We retain your account data and your customers' feedback data for as long as your account remains active. Upon cancellation of your account:

• You may request an export of all your data at any time up to the end of your final billing period
• Following account termination, your data will be deleted from our active systems within 90 days
• Anonymised, aggregated analytics data may be retained indefinitely as it cannot be used to identify you or your customers

To request early deletion of your data, contact us at hello@reputify.co.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to our legal obligations)
• Data portability: Request an export of your data in a machine-readable format
• Objection: Object to certain types of processing, including direct marketing
• Restriction: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, contact us at hello@reputify.co. We will respond within 30 days. We may need to verify your identity before processing your request.

8. GDPR Compliance

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) applies to our processing of your data.

Our legal bases for processing personal data are:

• Contract performance: Processing necessary to provide the Service you have contracted for
• Legitimate interests: Processing for fraud prevention, security, and product improvement, where our interests do not override your rights
• Consent: For optional data collection such as Google Analytics (where applicable)

We store EU personal data on EU-based infrastructure (AWS EU region via Supabase) in accordance with GDPR data localisation considerations. If you are a business owner based in the EU using our Service, you are acting as a data controller with respect to your customers' feedback data, and we act as your data processor. We process that data in accordance with your instructions and these Terms.

For GDPR-related requests or to appoint a Data Protection Officer contact, please write to hello@reputify.co.

9. Children's Privacy

Reputify is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If you believe that a child under 18 has provided us with personal data, please contact us at hello@reputify.co and we will delete such data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where practicable, by sending a notification to your registered email address. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

SkyBlueMedia operating as Reputify
Website: reputify.co
Email: hello@reputify.co