Privacy Policy
Last updated: February 2026
RepAI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content repurposing platform (the "Service"). This policy applies to users worldwide and complies with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the UK Data Protection Act, Canada's PIPEDA, Brazil's LGPD, and other applicable data protection laws.
1. Data Controller
RepAI acts as the data controller for the personal data processed through the Service. For any privacy inquiries, contact us at: hello@repai.space.
2. Information We Collect
We collect the following categories of information:
a) Account Information
Name, email address, and profile picture provided via your authentication provider (Clerk). We do not store your password — authentication is handled by Clerk.
b) Content You Submit
Text, URLs, audio, and video files you upload for repurposing. This content is processed by AI to generate outputs and is automatically deleted from our servers after processing.
c) Payment Information
Payment details are processed directly by Stripe. We never see or store your full credit card number. We only store your Stripe customer ID and subscription status.
d) Usage Data
Pages visited, features used, timestamps, device type, browser type, and IP address. This data is collected for service improvement and security purposes only.
3. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Contract performance: To provide and maintain the Service you subscribed to.
- Legitimate interest: To improve the Service, ensure security, and prevent fraud.
- Consent: For optional communications (e.g., marketing emails). You can withdraw consent at any time.
- Legal obligation: To comply with applicable laws, such as tax and accounting requirements.
4. How We Use Your Information
- Provide, operate, and maintain the Service
- Process your content through our AI pipeline and deliver repurposed outputs
- Process payments and manage subscriptions via Stripe
- Send transactional communications (account confirmations, billing receipts)
- Improve and optimize the Service based on aggregated, anonymized usage data
- Detect, prevent, and address fraud, abuse, and technical issues
- Comply with legal obligations
We do NOT use your content to train AI models. Your content is processed and deleted — never retained for training purposes.
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share information only with the following service providers, under strict data protection agreements:
- Clerk — Authentication and user management
- Stripe — Payment processing and subscription management
- Supabase — Secure database hosting (data encrypted at rest and in transit)
- OpenAI / Anthropic — AI processing for content repurposing (content is not retained by these providers for training)
- Vercel — Application hosting and edge delivery
We may also disclose information if required by law, legal process, or to protect the rights and safety of RepAI and its users.
6. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer data from the EU/EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards as required by applicable law. Our service providers maintain adequate data protection measures compliant with international standards.
7. Data Retention
- Uploaded content: Deleted automatically after processing (not retained).
- Account data: Retained for the duration of your account. Deleted within 30 days of account deletion.
- Payment records: Retained as required by tax and accounting laws (typically 7 years).
- Usage logs: Retained for up to 12 months for security and analytics, then anonymized or deleted.
8. Your Rights
Depending on your location, you may have the following rights:
For all users:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Data portability: Receive your data in a structured, machine-readable format.
Additional rights under GDPR (EU/EEA/UK):
- Restrict processing of your personal data.
- Object to processing based on legitimate interest.
- Withdraw consent at any time (without affecting prior processing).
- Lodge a complaint with your local Data Protection Authority.
Additional rights under CCPA (California):
- Know what personal information is collected, used, and shared.
- Request deletion of personal information.
- Opt out of the sale of personal information (we do not sell your data).
- Non-discrimination for exercising your privacy rights.
To exercise any of these rights, contact us at hello@repai.space. We will respond within 30 days (or as required by applicable law).
9. Cookies & Tracking
We use only essential cookies required for the Service to function properly:
- Authentication session cookies (Clerk)
- Language preference cookie
- Stripe fraud prevention cookies
We do NOT use advertising cookies, tracking pixels, or third-party analytics cookies. We do not track you across other websites.
10. Children's Privacy
The Service is not directed at children under 16 (or under 13 in jurisdictions where applicable). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
11. Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure authentication via Clerk, and regular security reviews. However, no method of transmission over the Internet is 100% secure.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 30 days before the changes take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions, data requests, or complaints, contact us at:
Email: hello@repai.space
We aim to respond to all inquiries within 30 days.