← Back to Repzy

Privacy Policy

Last updated: 12 August 2026
This policy describes, in plain language, how Repzy actually handles data today based on how the product is built. It is a first published version intended to close the gap of having no privacy policy at all — it has not yet been reviewed by external legal counsel, and should be before it is relied upon as a complete legal document. Sooraj: get this reviewed against India's Digital Personal Data Protection Act, 2023 (DPDP Act) before onboarding any tenant outside a pilot/testing context.

Who this applies to

Repzy ("we", "us") operates repzy.tech and the Repzy platform, a review-automation service sold to local businesses ("tenants" or "clients" — e.g. driving schools, clinics, salons, print shops). This policy covers two groups of people: (1) tenant staff and owners who use the Repzy platform directly, and (2) the end customers of those tenants, whose contact details a tenant's staff enter into Repzy in order to send a post-visit review request.

A tenant is the data controller for their own customers' information; Repzy acts as the data processor that stores it and sends messages on the tenant's behalf. If you are an end customer of a Repzy client business and want your data corrected or removed, please contact that business directly, or use the contact details below and we will route your request to them.

What we collect

DataFromWhy
Full name, phone number, email (optional)Entered by tenant staff at intakeTo send the post-visit review request and, if needed, a private follow-up
Visit rating and free-text commentSubmitted by the end customer via the feedback linkRouted privately to the tenant's owner when a visit comes back 3★ or lower
Message delivery status, link clicks, timestampsAutomatically, when a review request is sentTo track whether a request was delivered/opened and avoid re-sending
Owner/staff login detailsEntered at account setupTo authenticate access to the tenant's dashboard
Business compliance details (e.g. trade license, DLT registration IDs)Entered by the tenant during onboardingRequired by WhatsApp/SMS providers (Meta, Twilio) to register the tenant's sending number

How customer phone numbers and comments are protected

Who we share data with

We use a small number of third-party processors to operate the service. We do not sell customer data.

ProcessorPurpose
Mandrill (Mailchimp Transactional)Sending review-request and report emails
Twilio / WhatsApp Business Platform (once live per tenant)Sending review-request messages by SMS/WhatsApp
Google Gemini APIGenerating the AI-written summary in an owner's nightly report from that tenant's own review/feedback data
HostingerApplication hosting and database
CloudflareDNS, CDN, and security filtering in front of repzy.tech

Data retention

Customer records are retained for as long as the tenant's account is active, so repeat visits can be recognised and duplicate requests avoided. A tenant can request deletion of their customer records at any time by contacting us.

Your rights

If you are located in India, you have rights under the DPDP Act, 2023, including the right to access, correct, and request erasure of your personal data, and to withdraw consent to future messages. To exercise these rights, contact the business that sent you a review request directly, or reach us using the details below and we will forward your request.

Contact us about this policy
WhatsApp: +91 94964 68961
We will add a dedicated privacy inbox address here once one is set up.