Privacy policy
How ReputeTrust collects, uses and protects personal information, for the businesses who use it and for their customers.
In force from 30 September 2026. ReputeTrust, Lagos, Nigeria. Questions to oladapodaniel10@gmail.com.
Two different relationships
This policy covers two groups of people, and our duties differ for each.
- Businesses who use ReputeTrust. When you open an account, we decide how your account information is handled. In data protection language we are the controller for it.
- Your customers. When you upload a customer list, or one of your customers scans your poster and leaves feedback, that information belongs to you. You decide why it is collected and what happens to it; we only act on your instructions. We are the processor, and you are the controller. If you are one of those customers and want your details removed, contact the business that holds them. You may also write to us and we will pass it on.
What we collect
From businesses
- Your name and email address, and a password stored only as a cryptographic hash.
- Your business and location details: name, address, timezone, Google place identifier and review link.
- Your settings, message templates, logo and the replies you approve.
- Billing records: which plan, what was charged, when, and the reference from our payment provider. We never see or store your card number.
- Technical records kept to run the service securely: IP address, browser type, and logs of requests and errors.
About your customers, on your behalf
- Names, email addresses and, if you provide them, phone numbers.
- Whether a review request was sent, opened, acted on, or unsubscribed from.
- Private feedback they leave, including a star rating and any message.
- Public reviews about your business, collected from Google. These are already public.
We ask you to confirm, every time you add customers, that they gave you their details and agreed to hear from you. That confirmation is a condition of using the service, and the responsibility for it is yours.
What we do with it
- Send review requests and reminders from your business to the customers you add.
- Collect your public Google reviews and draft replies for you to approve. No reply is ever published without your approval.
- Check whether AI assistants and search engines name your business, and show which pages inform those answers.
- Send you the weekly summary you asked for, and messages about your account.
- Take payment, prevent abuse, fix faults and keep the service secure.
We do not sell personal information. We do not use your customers’ details to advertise to them, and we do not use them for anyone else’s business.
Why we are allowed to
Under the Nigeria Data Protection Act and equivalent laws elsewhere, we rely on these grounds: performing the contract we have with you; our legitimate interest in keeping the service running, secure and improving; and your consent where you have given it. For emails sent to your customers, the lawful ground is the consent they gave you, which is why we ask you to confirm it.
Who else sees it
We use a small number of suppliers to run the product. Each receives only what it needs.
| Supplier | What it does | What it receives |
|---|---|---|
| Supabase | Database, sign-in and file storage | Everything stored in your account |
| Vercel | Runs the application | Requests, IP addresses, logs |
| Resend | Sends email | Recipient address and message content |
| Flutterwave | Takes payment | Your name, email and payment details, given directly to them |
| SerpApi | Collects your public Google reviews | Your Google place identifier |
| Tavily | Web search for visibility checks | Search phrases about your business and area |
| Our AI provider | Drafts replies and outreach | Review text, your business details and instructions |
| Business lookup, and review replies if you connect your profile | Business names and, when connected, your authorisation |
We also disclose information if the law requires it, to protect our rights or someone’s safety, or to a buyer if the business is sold, in which case this policy travels with it.
Where it is kept
Our suppliers operate outside Nigeria, so your information is transferred abroad and processed there. We only use suppliers who commit to protecting it to a standard comparable with Nigeria law, through their own contractual terms.
How long we keep it
- Account and customer records: for as long as your account is open.
- After you close your account: 30 days, then deletion, except where we must keep records longer.
- Billing records: up to six years, because tax law requires it.
- Unsubscribe records: kept indefinitely, because that is how we honour the request.
- Security logs: up to 12 months.
How we protect it
Traffic is encrypted in transit and data is encrypted at rest by our suppliers. Every account’s data is separated inside the database, so one business cannot read another’s, and that separation is enforced by the database rather than by application code alone. Passwords are hashed and never visible to us. Payment card details never reach our servers. No system is perfect, and if a breach affects you we will tell you and the regulator as the law requires.
Your rights
You may ask us for a copy of your information, correct it, delete it, receive it in a portable form, object to how we use it, or withdraw consent. Write to oladapodaniel10@gmail.com and we will reply within 30 days. If you are unhappy with our answer you can complain to the Nigeria Data Protection Commission (NDPC), or to the data protection authority where you live.
Cookies
We use only what the product needs: a cookie that keeps you signed in, one that remembers which location you are working on, and a browser setting that remembers light or dark mode. There is no advertising or cross-site tracking, so there is no cookie banner to dismiss.
Children
ReputeTrust is for businesses. It is not meant for anyone under 18, and we do not knowingly collect their information.
Changes
If we change this policy we will update the date at the top, and tell account holders by email when the change is significant.