Privacy policy

01Who we are

RepYak is a service run by RepYak, Kochi, Kerala, India ("we", "us"). It helps local businesses collect Google reviews, run a loyalty card, send bills and keep a simple website. This policy covers the RepYak Android app, the web app at /app, this website, and the pages customers open from a business's QR code or link (review page, loyalty card, bill and website).

There are two kinds of people in RepYak:

• Business users: owners and staff who sign up and use the app.
• Customers: people who scan a business's QR code, join its loyalty card, or open a bill or website the business sent them.

02What we collect from business users

• Account: your name, email address, password (stored by Google Firebase, never readable by us) or Google sign-in, and your phone number if you add it.
• Business details: business name, type, city, country, time zone, locations, Google review link, logo, photos, website text, services and prices, opening hours, payment link or UPI ID, tax settings, packages and loyalty settings.
• Team: names and emails of staff you invite and what each one can do.
• Billing: plan and payments you make to us, GST details if you add them, and invoices. Card, UPI and bank details are handled by Dodo Payments (plans) and Razorpay (QR credit packs and print orders); we never see them.
• Device: a notification token for your phone (so we can send alerts), app version, and when you last used the app.
• Support: messages you send us.

03What we collect about customers (on behalf of the business)

• Ratings and messages: the star rating, topic chips and any private message a customer sends to the business from the review page, and their contact details if they choose to leave them. Google reviews are posted by the customer on Google, under their own Google account; we don't receive or store their Google account.
• Loyalty card: name, WhatsApp/phone number, whether they agreed to receive offers and reminders, visits and stamps, rewards and offers used, and a notification token if they turn on notifications.
• Bills, quotes and packages: what the business enters (items, amounts, notes, job photos and checklist), payments the business records, and whether the customer accepted a quote, approved work or said they paid.
• Fraud checks: for each rating we store a one-way code made from the network address and the day, never the address itself. It lets us spot the same network rating again and again, and can't be turned back into the address.

For this customer data, the business is responsible for it (the "data controller" or "data fiduciary") and we process it for them. Businesses must only add customers who agreed, and must honour their requests. Customers can stop offers and reminders from their card at any time, or ask the business or us to delete their details.

04How we use data

• To run the service: show reviews and ratings to the business, keep loyalty cards and bills, send the reminders and notifications the business and customer chose, and publish the business's website.
• To keep it safe: prevent fake ratings and abuse, and suspend accounts that break our Terms.
• To bill you: plans, credits, print orders and invoices.
• To show the right prices: we read your approximate country from your network address (no location permission) to show prices in rupees or US dollars.
• To help you: support, service emails (for example a weekly report you can turn off), and important changes.
• To improve RepYak using totals and counts. We don't read customers' messages for this.

We don't sell personal data, don't use it for advertising, and don't build profiles of customers across businesses.

05Who helps us run RepYak

We use these service providers. They only get what they need to do their job:

We may also share data if the law requires it, or to protect people from fraud or harm. If RepYak is sold or merged, data moves with it under this policy.

Our providers may store data outside your country (for example in the United States or Europe). They are bound to protect it.

06How long we keep data

• Business and customer data stays while the business account is open.
• When a business account is deleted, its locations, cards, reviews, messages, customers, visits, bills, packages, website and staff links are deleted. Payment and invoice records are kept as long as tax law requires.
• Logs and fraud codes are kept only as long as needed for security.

07Your choices and rights

• See and change your business data in the app at any time.
• Delete your account: in the app (Settings → Delete my account) or at /delete-account.
• Customers: stop offers and reminders from your loyalty card, turn off notifications in your browser, or ask the business to remove you. You can also write to us at hello@repyak.com and we'll help.
• Emails: turn off the weekly report email in the app.

Depending on where you live (for example under India's Digital Personal Data Protection Act, the EU/UK GDPR or US state laws such as California's), you may have rights to access, correct, delete or move your data, and to complain to a regulator. Write to hello@repyak.com; we answer within 30 days.

08Cookies and storage

We don't use advertising or tracking cookies. The app and pages use your browser's storage to keep you signed in, remember your language and save your loyalty card on your phone. Pages load fonts from Google Fonts and a few scripts from public libraries.

09Security

Data travels encrypted (HTTPS). Database access is limited by strict rules: staff see only what the owner allows, and customer pages use secret links. No system is perfect, so please use a strong password and tell us at once if you notice anything wrong.

10Children

RepYak is for businesses. Business users must be 18 or older. Customer pages are general-audience pages; we don't knowingly collect data from children under 13 (or the age required in your country). If you think a child's data was added, write to us and we'll delete it.

11Changes and contact

If we change this policy in an important way, we'll tell business users in the app or by email before it takes effect. The date at the top shows the latest version.

Questions, requests or complaints: hello@repyak.com. Grievance officer: the RepYak support team, hello@repyak.com.