Privacy Policy

Overview

RepAlmighty ("we," "us," or "our") operates an AI-powered local business growth platform at repalmighty.com. This Privacy Policy applies to all information we collect through our website, platform, and any related services (collectively, the "Service").

We are committed to protecting your personal information and being transparent about how we collect and use it. This Policy describes:

• What information we collect and why.
• How we use and share that information.
• How we protect it.
• Your rights and choices regarding your information.

This Policy is incorporated into and subject to our Terms of Service. Capitalized terms not defined here have the meanings given in our Terms of Service.

Information We Collect

• Account information: Name, email address, password, and business name when you create an account.
• Business information: Business name, address, phone number, website URL, hours of operation, services offered, and other details you provide about your business.
• Payment information: Billing address and payment method details. Payment card information is processed directly by our payment processor and is not stored on our servers.
• User content: Photos, review responses, GBP posts, blog content, and other content you submit to or through the Service.
• Communications: Messages, emails, and other communications you send to us, including support requests and feedback.
• Customer data: Contact information for your customers that you provide to use features such as review requests and appointment booking.

• Usage data: Pages visited, features used, time spent on the Service, clicks, and other interaction data.
• Device and browser information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Log data: Server logs including access times, referring URLs, and error reports.
• Location data: Approximate geographic location derived from your IP address.
• Cookies and similar technologies: Session cookies, persistent cookies, and similar tracking technologies as described in Section 9.

• Google Business Profile data: When you connect your Google account, we access your GBP listing data, posts, photos, Q&As, insights, and performance metrics via the Google Business Profile API.
• Google Search Console data: Search queries, impressions, clicks, and keyword rankings from your connected Search Console account.
• Google Places data: Public business listing information retrieved via the Google Places API for our Business Grader tool.
• Payment processor data: Transaction confirmations and billing status from our payment processor.

How We Use Your Information

We use the information we collect for the following purposes:

• Creating and managing your account.
• Operating, maintaining, and improving the Service and its features.
• Processing payments and managing subscriptions.
• Providing customer support and responding to your requests.
• Personalizing your experience and delivering features relevant to your business.

• Generating GBP posts, blog articles, review responses, website copy, and other content on your behalf.
• Analyzing your business data to provide competitive intelligence and recommendations.
• Automating review requests, booking confirmations, and follow-up communications to your customers.

• Sending your Weekly Intelligence Reports and other Service-related communications.
• Sending transactional emails including receipts, account updates, and security notifications.
• Sending marketing communications about RepAlmighty features and updates (you may opt out at any time).

• Complying with applicable laws, regulations, and legal processes.
• Enforcing our Terms of Service and other policies.
• Detecting, preventing, and responding to fraud, security incidents, and abuse.
• Protecting the rights, property, and safety of RepAlmighty, our users, and the public.

How We Share Your Information

We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:

We share information with third-party vendors who help us operate the Service. These providers are bound by confidentiality agreements and may only use your information to provide services to us.

We share information with carefully selected third-party service providers who help us operate the Service, including payment processors, email delivery services, SMS providers, AI content generation services, and hosting infrastructure providers. These providers are contractually bound to use your information only to provide services to us and are prohibited from using it for any other purpose.

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of RepAlmighty, our users, or others.

If RepAlmighty is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email and provide notice on our website before your information is transferred and becomes subject to a different privacy policy.

We may share your information with third parties when you have given us your explicit consent to do so.

Google API Data and Limited Use Policy

RepAlmighty's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google Business Profile listing data including name, address, phone, hours, categories, and description.
• Google Business Profile posts, photos, and Q&As.
• Google Business Profile performance metrics including profile views, search impressions, direction requests, and website clicks.
• Google Search Console data including search queries, impressions, clicks, and keyword ranking positions.
• Basic Google account information including email address and name, used solely for account authentication.

• To display your business information in your RepAlmighty dashboard.
• To publish posts, photos, and Q&As to your Google Business Profile on your behalf.
• To generate performance reports and competitive intelligence insights.
• To track keyword rankings and search performance for your business.

Google API data is retained only as long as your account is active and you maintain the Google connection. When you disconnect Google or cancel your account, we delete all Google API data within 30 days.

You can disconnect Google at any time from your dashboard under Settings > Integrations > Disconnect Google. You can also revoke access directly at myaccount.google.com/permissions.

AI and Automated Processing

RepAlmighty uses artificial intelligence to generate content and automate tasks on your behalf. When you use our Service, your business information, customer data, and connected account data may be processed by our AI systems to generate GBP posts, blog articles, review responses, website copy, competitive intelligence reports, and other content.

We use third-party AI services to power our content generation features. Business information processed through these AI services is subject to those providers' privacy practices and is used solely to generate content on your behalf. We do not use your data to train any AI models.

Automated decisions made by our AI systems, such as content generation and scheduling, are based on your business information and settings. You can review, edit, or disable AI-generated content and automation at any time through your dashboard.

You are responsible for reviewing AI-generated content before it is published. RepAlmighty is not liable for the accuracy, appropriateness, or consequences of AI-generated content.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained for the duration of your subscription and for 90 days after cancellation to allow for account reactivation.
• Business and content data: Retained while your account is active. Deleted within 90 days of account cancellation.
• Google API data: Deleted within 30 days of disconnecting Google or cancelling your account.
• Billing and payment records: Retained for 7 years as required by applicable financial regulations.
• Support communications: Retained for 3 years to provide consistent support and resolve disputes.
• Anonymized analytics data: May be retained indefinitely in anonymized, aggregated form that cannot identify individual users.

You may request deletion of your account and personal information at any time by contacting privacy@repalmighty.com. We will process deletion requests within 30 days, subject to legal obligations that require us to retain certain information.

Security

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Industry-standard encryption for stored OAuth tokens and sensitive credentials.
• Encrypted transmission for all data sent between your browser and our servers.
• Encrypted database storage with strict access controls limiting who can access production systems.
• Regular security audits and vulnerability assessments.
• Strict access controls ensuring only authorized personnel can access production systems.

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by law.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service. Here is what we use and why:

• Essential cookies: Required for the Service to function. These enable authentication, session management, and security features. You cannot opt out of essential cookies without stopping use of the Service.
• Analytics cookies: Help us understand how users interact with the Service so we can improve it. We use aggregated, anonymized data from these cookies.
• Preference cookies: Remember your settings and preferences to personalize your experience.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the functionality of the Service. We do not use cookies for advertising or cross-site tracking.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Portability: Request your personal information in a structured, machine-readable format.
• Restriction: Request that we restrict processing of your personal information in certain circumstances.
• Objection: Object to our processing of your personal information for certain purposes.
• Marketing opt-out: Opt out of marketing communications at any time by clicking "unsubscribe" in any email or contacting us at privacy@repalmighty.com.

To exercise any of these rights, contact us at privacy@repalmighty.com. We will respond to verified requests within 30 days. We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

You have the right to know what categories of personal information we collect, the purposes for which we use it, and whether we sell or share it with third parties. See Section 2 for categories we collect and Section 3 for how we use them.

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions for legal compliance, security, and completing transactions you have requested.

You have the right to request correction of inaccurate personal information we maintain about you.

We do not sell your personal information and we do not share your personal information for cross-context behavioral advertising. There is nothing to opt out of in this regard.

We will not discriminate against you for exercising any CCPA rights. We will not deny you goods or services, charge different prices, or provide a different level of service based on your exercise of these rights.

To exercise your California privacy rights, contact us at privacy@repalmighty.com or through our contact page. We will verify your identity and respond within 45 days. You may designate an authorized agent to make requests on your behalf.

• Identifiers: name, email address, IP address, account ID.
• Commercial information: subscription plan, payment history, products or services purchased.
• Internet or other network activity: usage data, log data, cookies.
• Geolocation data: approximate location derived from IP address.
• Professional or employment-related information: business name, industry, services offered.
• Inferences drawn from other data: account preferences, feature usage patterns.

Children's Privacy

The Service is not directed to or intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@repalmighty.com.

Third-Party Links and Services

The Service may contain links to third-party websites and services, including Google, Yelp, Facebook, and others. This Privacy Policy does not apply to those third-party websites. We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party services you access through our Service.

When you connect third-party accounts such as Google to RepAlmighty, those connections are governed by both this Privacy Policy and the respective third party's privacy policy. You can disconnect third-party integrations at any time from your dashboard settings.

International Data Transfers

RepAlmighty is based in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

By using the Service, you consent to the transfer of your information to the United States and to the processing of your information in the United States in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by email to your registered address and by posting a notice on the Service at least 30 days before the changes take effect.

Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you must stop using the Service.

We encourage you to review this Policy periodically. The "Effective" date at the top of this page indicates when this Policy was last updated.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: privacy@repalmighty.com
• Website: repalmighty.com/contact
• Company: RepAlmighty · Anaheim, California

We will respond to all privacy-related inquiries within 30 days.