Privacy Policy

This policy explains what information RepGet ("we", "the service") collects, why we collect it, and what we do with it. It applies to everyone who uses the service.

Who we are

RepGet is a service that analyses a customer's website, researches search terms, writes articles, and publishes them to that customer's own website. If you have a question about this policy or about your data, contact us at support@repget.com.

What we collect

Account information. Your name, email address, and (if you sign in with Google) your Google profile photo. We use this to identify you and to contact you about your account.

Your website content. When you add a website, we fetch its public pages and store the text, headings, links and images we find, so we can understand what your business does and check the site for problems. We only fetch pages that are publicly available to anyone.

Search and analytics data. If you connect Google Search Console or Google Analytics, we import performance figures - searches, clicks, impressions, rankings, sessions and page views - so we can show you how your pages perform. See "Google user data" below.

Integration credentials. If you connect your website - WordPress, Ghost, Shopify or your own webhook - or a Google account, we store the credentials needed to keep that connection working.

Payment information. Payments are processed by Stripe. We never see or store your full card details; we keep only the subscription status and a customer reference from Stripe.

Usage records. We record which operations ran for your account - pages crawled, articles written, external API calls - so we can enforce plan limits and understand our own costs.

Visit statistics. We count visits with Vercel Web Analytics, which gives us aggregate figures: which pages are viewed, which website sent the visitor, and the visitor's country, browser, operating system and type of device. It uses no cookies, does not follow you across other websites, and builds no profile of you. Before a page address is sent we strip everything after the path and any invitation code or record ID in it; pages in our admin area are not counted at all.

Google Analytics and Google Ads, only if you accept. On our public pages and the sign-in pages - never inside your account - we ask whether we may use cookies from Google Analytics and Google Ads. Until you answer, Google's tags load without cookies and send Google only cookieless signals (that a page was viewed, from which kind of browser and device), which Google uses to estimate the visits it cannot count. If you decline, they stop. If you accept, Google Analytics sets two cookies (_ga and _ga_ followed by our property code, kept for 13 months) to recognise a returning browser, and records which pages are viewed, which website or ad sent you, your approximate location (country and city) and your browser and device. Page addresses are cleaned in the same way before they are sent, keeping only the campaign tags that say which ad or link brought you (such as utm_source or Google's gclid). Google Ads may set its own cookies (names starting with _gcl_) to tell us when a visit from one of our ads leads to a sign-up, and to show our ads to people who have visited.

Sign-ups and payments, if you accepted. When you create an account, start your free trial, or make the first payment of a subscription, we tell Google Analytics that this happened - for a payment, the plan, the amount and the currency - linked to the Google Analytics cookie of the browser in which you accepted. We never send your name, your email address, or anything about your websites or articles. Google says Google Analytics does not log or store IP addresses. Google keeps Google Analytics records for at most 14 months, processes them for us under its data processing terms, and may do so in the United States under the EU-US Data Privacy Framework. If you decline, no Google cookie is set and nothing about your account is sent to Google.

Google user data

If you choose to connect Google Search Console or Google Analytics, we request these permissions:

• Search Console (read only) - to read which searches brought people to your website, and how your pages rank.
• Analytics (read only) - to read visitor and session figures for your website.

Both permissions are read only. We cannot modify, delete or publish anything in your Google account, and we never request the ability to do so.

We use this data solely to show you how your website is performing inside your own account. We do not sell it, use it for advertising, use it to train machine-learning models, or share it with anyone other than the service providers listed below.

You can disconnect Google at any time from your website's settings page, which deletes the stored tokens. You can also revoke our access directly at your Google account permissions page.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Artificial intelligence

We use Anthropic's Claude models to describe your business, suggest search terms, and write articles. To do this we send the relevant content - your website text, your business profile, and the article brief - to Anthropic for processing. We do not send your Google analytics data, your credentials, or your payment information.

How we protect your data

Integration credentials - publishing keys and passwords, and Google refresh tokens - are encrypted before they are stored, using AES-256-GCM with a key held separately from the database. They are never shown back to you or to anyone else, in any form.

Every customer's data is scoped to their own workspace and cannot be read by another customer. Requests for records belonging to a different workspace are refused.

No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your data, we will tell you.

Who we share data with

We do not sell your data. We share it only with the providers needed to run the service:

• Supabase - database hosting
• Vercel - application hosting and visit statistics
• Google - visit statistics (Google Analytics) and advertising measurement (Google Ads), only for visitors who accept cookies
• Stripe - payment processing
• Anthropic - AI text generation
• DataForSEO - search volume and keyword data
• Inngest - background job processing
• Sentry - error monitoring

How long we keep it

We keep your data for as long as your account is open. If you delete a website, its pages, keywords, articles and analytics are deleted with it. If you close your account, we delete your data within 30 days, except where we are required to keep billing records for tax purposes.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email support@repget.com and we will respond within 30 days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

Cookies

We use a cookie to keep you signed in, and one called repget_consent to remember your answer about Google's cookies for six months. If you accept, Google Analytics also sets the two cookies described above, and Google Ads may set its own (names starting with _gcl_).

One called repget_site_language remembers which language you were reading the site in for a year, so the sign-in and sign-up pages can use it. It holds only the language's code.

Two cookies remember which link brought you here, so the right person is credited if you open an account: ref for a customer's referral link (30 days) and repget_partner for a partner's link (90 days). Each holds a code or a random token, nothing about you, and is used for nothing else. For partner links we keep when the link was opened and a one-way, keyed fingerprint of your network - never your address - and delete unused clicks after the link's window.

You can change your answer at any time with "Cookie settings" at the bottom of every public page. Declining after accepting stops Google's tags and deletes their cookies. Change cookie settings

Changes

If we change this policy we will update the date at the top of this page, and tell you by email if the change is significant.