Privacy Policy
This policy explains how Reepio ("we") handles personal data in Reepio.
## Who is responsible - Your account data (name, email, billing details, usage): we are the controller. - Your contacts' data (the people you email): you are the controller and we process it on your behalf, only on your instructions.
Contact: support@reepio.local
## What we collect - Account details: name, email, password (stored only as a secure hash), optional two-factor settings, and Google sign-in identifier if you use it. - Billing: plan, invoices and payment status. Card details are handled by the payment provider you choose; we do not store full card numbers. - Usage and security logs: sign-ins, IP addresses and important actions, kept to protect accounts and investigate abuse. - Your workspace content: contacts, lists, campaigns, templates, images and brand information you add. - Email engagement: when tracking is on, opens and clicks on your campaigns, and unsubscribes, bounces and complaints.
## How we use it To provide and secure the service, send campaigns you schedule, process payments, send service emails (verification, password reset, receipts), provide support and meet legal obligations. We do not sell personal data and do not use your contacts for our own marketing.
## AI features When you use AI writing tools, your brief and your brand profile are sent to the language-model provider configured for the platform to generate a draft. Records from your contact list are not sent.
## Cookies We use only essential cookies that keep you signed in and protect against forged requests. We do not use advertising or analytics cookies.
## Service providers Depending on how the platform is configured: hosting provider, email delivery provider or mailbox service, payment gateways, the AI provider, and Google if you choose Google sign-in. They process data only to provide their service to us.
## Retention Account data is kept while your account is open. When you delete your account, sign-in data is removed immediately and workspace data (contacts, campaigns, files) is permanently deleted after 30 days. Invoices are kept as long as tax law requires. While a workspace exists, its unsubscribe and bounce suppressions are kept so that people who opted out are not emailed again.
## Your rights You can access and download your data (Settings → Security → Download my data), correct it, and delete your account at any time. You may also object to or restrict processing and complain to your data-protection authority. Contacts of our customers should contact the sender of the email; we will help our customers respond.
## Security Encryption in transit, hashed passwords, encrypted secrets, two-factor authentication, strict separation between customer accounts, and audit logs.
## Changes We will post updates here and notify account holders of material changes.