Privacy Policy

What We Collect

When you request a free written review sample, start the free founding pilot or the $99/month plan, or use RepstackHQ, we collect only what is needed to prepare your requested readout, setup, drafts, approvals, and service communications:

• Business information: Your business name, city or service area, Google Business Profile URL, and business category.
• Contact information: Your name, email address, and optional phone number if you provide it.
• Setup and voice information: Your selected or intended plan, approval preference, communication style, preferred phrases, tone notes, main review concern, and sensitive-review boundaries.
• Public review content: Text from Google reviews posted on your business profile. This is customer-authored public content sourced from Google and processed only as needed to draft, approve, post, and report on review responses.
• Founding pilot testimonial (optional): If you choose to give us feedback after the free founding pilot and approve it for publication, we may quote it, with the attribution you approved and a note that you received the pilot free, on repstackhq.com, in outreach emails and on social media. You can ask us to remove it at any time.
• Billing information: Your subscription plan and payment status. Card numbers and payment details are handled entirely by Stripe; we never see or store them.
• Form request context: The source page, referring page, submission time, and a short hash derived from the browser user-agent. We use this limited context for request handling, security, and troubleshooting.
• First-party website usage: Page paths, generic CTA labels and destinations, broad referrer category, device class, allowlisted campaign tags in the page URL, and a daily hashed session identifier. Campaign tags are limited to source, medium, campaign, and a non-sensitive content label. Analytics events do not include typed form values, reviewer names, or review details.

Do not submit Google passwords, card details, private patient records, confidential customer information, or other account secrets. Sensitive-review boundaries should be described generally enough to guide escalation without including private records.

Browser-Only Reply Builder

The free reply builder runs in your browser. Reviewer names and review details typed into that tool are not submitted to RepstackHQ, saved in our form store, or sent to an AI provider. The page may record generic events such as opening the tool, building a draft, copying a draft, or triggering a sensitive-content pause, but those events do not contain the text you entered.

Cookies and First-Party Analytics

RepstackHQ's own first-party analytics do not use cookies. The site creates a random identifier in browser session storage so pageviews and important CTA events can be grouped during the browser session. Allowlisted campaign tags may also be kept for that browser session to attribute a visit without storing contact details. Before storage, the server combines the session identifier with the date and a site-controlled value and stores only a shortened hash. Referrers and devices are reduced to broad categories.

We also use Cloudflare Web Analytics to count visits in aggregate. It does not use cookies or local storage and does not track you across sites.

Advertising (Google AdSense)

This website shows ads served by Google AdSense, an advertising service provided by Google. Google and its partners are third-party vendors that use cookies and similar technologies, such as device identifiers and local storage, to serve ads on this site. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet. These may be personalized ads, chosen using information about your browsing and interests. Google also uses these cookies to limit how often you see an ad, measure ad performance, and detect fraud and abuse.

When personalized ads are turned off or not permitted, Google may still show non-personalized ads, which are based on general context such as the page you are viewing and your approximate location, and may still use cookies for frequency capping, aggregated reporting, and fraud prevention.

• Opt out of personalized ads: You can turn off personalized advertising from Google in Google's ad settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info/choices.
• How Google uses data: Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites, and how it uses cookies in advertising at policies.google.com/technologies/ads.
• Visitors in the EEA, UK, and Switzerland: Where the law requires consent for advertising cookies, Google requires that consent before personalized ads are shown. Without it, ads in those regions may be limited or non-personalized.
• Browser controls: You can also block or delete cookies in your browser settings. Blocking cookies may affect the ads you see but will not affect your use of RepstackHQ.

Advertising cookies are set and read by Google and its partners, not by RepstackHQ. We do not send form entries, review text, reviewer names, or contact details to Google AdSense.

How We Use It

We use your data to evaluate the free written review sample request and provide the RepstackHQ review response service. That means:

• Reading your reviews and drafting responses in your voice
• Sending you approval batches by email, unless another written approval channel is agreed during onboarding
• Posting approved responses to your Google Business Profile
• Generating your monthly report card
• Quoting founding-pilot feedback you approved for publication, as described above
• Communicating with you about your account
• Understanding which pages and generic buyer-path actions are useful, without recording typed form or builder content in analytics

We do not sell or rent the information you give us (your contact details, business information, review content, voice profile, approvals and billing status), and we do not share it with Google AdSense or any other advertiser. We don’t use your review content or voice profile for advertising. We use it to provide the service you requested, prepare approvals and drafts, communicate with you about RepstackHQ and, if you approve, quote your founding-pilot testimonial.

Website ads are different. This website shows Google AdSense ads, and we earn money from them. Google and its partners use their own cookies and similar technologies to collect information about visits to this site, such as device and cookie identifiers, pages viewed and approximate location, to show ads, including personalized ads where permitted. Some state privacy laws treat letting advertising partners collect this kind of information for personalized ads as a "sale" or "sharing" of personal information. You can turn off personalized ads at any time as described in "Advertising (Google AdSense)" above.

Who We Share It With

We share data with the following third parties to operate the service and, for Google AdSense, to show ads on this website:

• Netlify: Hosts the website and serverless functions. Submitted form records and first-party analytics events are stored using Netlify services, including Netlify Blobs. Netlify's privacy statement is available at netlify.com/privacy.
• Cloudflare Web Analytics: Provides cookieless, aggregate visit statistics for this website. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
• Anthropic: When used for managed client drafting, public review text and relevant voice instructions may be processed through Anthropic's Claude API. Content typed into the browser-only reply builder is not sent to Anthropic. Anthropic's privacy policy is available at anthropic.com/privacy.
• Stripe: Handles all payment processing and subscription billing. Your card details go directly to Stripe and never touch our systems: stripe.com/privacy.
• Google Workspace / Gmail: Handles business email for RepstackHQ, including request notifications, acknowledgments, approval communication, and client support. Google's privacy policy is available at policies.google.com/privacy.
• Google AdSense: Serves ads on this website. Google and its partners may collect information through advertising cookies and similar technologies as described in the Advertising section above. Google's privacy policy is available at policies.google.com/privacy.
• Other written approval channels: If a non-email approval channel is agreed during onboarding, messages may include public review text, draft responses, and your approval instructions. The applicable third-party provider may process those messages under its own terms and privacy policy.

We share information only with the service providers listed above, and with Google and its advertising partners through advertising cookies as described above. Other third-party ad networks may also serve ads on this site through Google; you can opt out of many of them at aboutads.info/choices. We do not sell the information you give us.

Data Retention

We retain free sample information and client data only as long as reasonably needed to provide the service, maintain records, resolve disputes, or comply with legal obligations. If you cancel, you may request deletion of your voice profile and review queue history by emailing us. Some billing, legal, or security records may be retained where required or appropriate.

Your Rights

You can contact us at any time to:

• Access the data we have on your business
• Correct anything that's inaccurate
• Request deletion of data that is not required for billing, legal, security, or dispute records

We respond as required by applicable law and as practical for the request. Identity or authority may need to be verified before account or request data is disclosed, corrected, or deleted.

Security

Your data is stored with access restricted to RepstackHQ service operations and the tools needed to provide the service. We do not ask for your Google password. If posting support is needed, access should be provided through appropriate Google Business Profile permissions.

Contact

RepstackHQ is operated by Repstack Media LLC, a Florida limited liability company. This policy is part of our Terms of Service, including Sections 8 (Limitation of Liability) and 10 (Governing Law). Any dispute is resolved exclusively in the state or federal courts located in Palm Beach County, Florida.