Privacy Policy

1. Data Controller

RepAI acts as the data controller for the personal data processed through the Service. For any privacy inquiries, contact us at: hello@repai.space.

2. Information We Collect

We collect the following categories of information:

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract performance: To provide and maintain the Service you subscribed to.
• Legitimate interest: To improve the Service, ensure security, and prevent fraud.
• Consent: For optional communications (e.g., marketing emails). You can withdraw consent at any time.
• Legal obligation: To comply with applicable laws, such as tax and accounting requirements.

4. How We Use Your Information

• Provide, operate, and maintain the Service
• Process your content through our AI pipeline and deliver repurposed outputs
• Process payments and manage subscriptions via Stripe
• Send transactional communications (account confirmations, billing receipts)
• Improve and optimize the Service based on aggregated, anonymized usage data
• Detect, prevent, and address fraud, abuse, and technical issues
• Comply with legal obligations

RepAI does not train AI models with your content. We use it to produce your requested drafts and retain source text, transcripts and results in your account history. AI and transcription providers handle submitted data under their own applicable terms.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share information only with the following service providers, under strict data protection agreements:

• Clerk — Authentication and user management
• Stripe — Payment processing and subscription management
• Supabase — Database and uploaded-file storage
• Anthropic — AI processing for content repurposing
• AssemblyAI — Audio and video transcription
• Vercel — Application hosting and delivery

We may also disclose information if required by law, legal process, or to protect the rights and safety of RepAI and its users.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. When we transfer data from the EU/EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate safeguards as required by applicable law. Our service providers maintain adequate data protection measures compliant with international standards.

7. Data Retention

• Source text, URLs, transcripts and generated drafts are retained in your account history. Contact hello@repai.space to request deletion.
• Uploaded media: deletion is attempted after processing. Unsubmitted uploads or failed deletion attempts may leave files in storage.
• Account and payment records are retained to operate your account and meet applicable legal obligations. Contact us about a deletion request.
• Technical logs are subject to the retention settings of the hosting and service providers; the application does not enforce a fixed 12-month deletion schedule.

8. Your Rights

Depending on your location, you may have the following rights:

For all users:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Data portability: Receive your data in a structured, machine-readable format.

Additional rights under GDPR (EU/EEA/UK):

• Restrict processing of your personal data.
• Object to processing based on legitimate interest.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your local Data Protection Authority.

Additional rights under CCPA (California):

• Know what personal information is collected, used, and shared.
• Request deletion of personal information.
• Opt out of the sale of personal information (we do not sell your data).
• Non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at hello@repai.space. We will respond within 30 days (or as required by applicable law).

9. Cookies & Tracking

The service uses cookies for account sessions, language preferences and referral attribution:

• Authentication session cookies (Clerk)
• Language preference cookie
• Referral attribution cookie (30 days)
• Stripe fraud prevention cookies where applicable

When configured by the site operator, Facebook Pixel and LinkedIn Insight tags may also load for advertising measurement. These third-party services process data under their own policies.

10. Children's Privacy

The Service is not directed at children under 16 (or under 13 in jurisdictions where applicable). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL) and at rest, secure authentication via Clerk, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification at least 30 days before the changes take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions, data requests, or complaints, contact us at:

Email: hello@repai.space

We aim to respond to all inquiries within 30 days.