Privacy Policy

Last updated: 6 July 2026

This Privacy Policy explains how ReputeMap (“ReputeMap”, “we”, “us”) collects, uses, stores, shares and protects information when you use our website and the ReputeMap application (the “Service”). ReputeMap is a Google-review management tool for agencies. If you do not agree with this policy, please do not use the Service.

Information we collect

  • Account & workspace data — your name, email address, a hashed password, your agency workspace, and the clients, business locations and team members you add.
  • Google Business Profile data — when you connect a Google account, we access business profiles, locations, reviews, ratings and review replies through the Google Business Profile API, solely to provide the features you request.
  • Billing data — your plan and subscription status. Card details are entered on and handled by Stripe; we never see or store full card numbers.
  • Usage & device data — pages viewed, basic analytics and a first-touch attribution cookie, to understand how the Service is used.
  • Communications — messages you send us (e.g. support requests).

Google user data & Limited Use

We request the Google business.manage scope only to read the Google Business Profile information (business details, locations and reviews) of the accounts you connect, to publish review replies you author, and to generate the reports and alerts you configure.

ReputeMap’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, do not sell it, do not allow humans to read it except where you explicitly request support, where required for security or to comply with law, or where the data is aggregated and anonymized; and we do not transfer it except to provide or improve the Service, to comply with applicable law, or as part of a merger/acquisition with notice. You can disconnect Google at any time in the app, or revoke access at myaccount.google.com/permissions.

How we use your data

  • Provide, maintain and secure the Service.
  • Sync and display reviews, publish replies you author, and send the alerts, review requests and reports you configure.
  • Process subscriptions and billing.
  • Provide support and respond to your requests.
  • Improve the product and comply with legal obligations.

AI processing

To generate suggested reply drafts and sentiment, review text may be sent to our AI provider (Anthropic). This processing is transient and is not used to train third-party models. You always review and approve any reply before it is published.

Service providers (subprocessors)

We share data only with providers that help us run the Service:

  • Google — source of review/business data (Business Profile API).
  • Stripe — payment processing.
  • Amazon Web Services (SES) — sending email (alerts, review requests, reports).
  • Anthropic — AI reply drafts and sentiment.
  • DigitalOcean — hosting and infrastructure.
  • Google Analytics — aggregate usage analytics.

We do not sell your personal information.

If you manage reviews for your own clients, ReputeMap acts as your data processor — see our Data Processing Addendum.

Data retention

We keep your data while your account is active and as needed to provide the Service and meet legal obligations. You may request deletion of your account and associated personal data at any time (see “Your rights”).

Your rights

Depending on your location (including under GDPR and CCPA), you may have the right to access, correct, export or delete your personal data, and to withdraw consent. To exercise these rights — or to request deletion of Google user data we hold — email yaro@reputemap.com. You can disconnect your Google account in the app at any time.

Cookies & analytics

We use essential cookies to run the app (e.g. authentication) and Google Analytics with a first-touch attribution cookie to understand traffic. You can control cookies through your browser settings.

Security

Data is transmitted over encrypted connections (HTTPS), and OAuth tokens are encrypted at rest. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.

International transfers & children

Your data may be processed in countries other than your own. The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new “Last updated” date.

Contact

Questions or data requests: yaro@reputemap.com. See also our Terms of Service and Refund Policy.