Privacy Policy

Rep360 ("Rep360", "we", "our", or "us") is a review-collection and reputation-management platform. Rep360 is a product of Servgrow LLC, a United States limited liability company ("Servgrow"). References to "we" in this policy mean Servgrow LLC operating the Rep360 service.

This policy explains what information we collect, how we use it, how we share it, and the choices you have. It applies to (a) businesses and individuals who sign up to use Rep360 ("Customers") and (b) the end consumers our Customers contact through the platform ("End Users" — typically a Customer's own customer who has been asked to leave a review).

From Customers (the businesses using Rep360):

• Account information you provide at signup: name, email, password hash, and company name.
• Business profile information you enter: company name, phone number, email, address, website, logo, and owner name.
• Connection metadata for third-party platforms you authorise — Google Business Profile (account/location identifiers and OAuth tokens) and Facebook (Page identifier, name, and Page access token). We never receive your Google or Facebook passwords.
• Billing information (handled by our payment processor — we do not store full card numbers).

From End Users (people receiving review requests):

• Contact information our Customer uploads or adds: name, email address, and mobile phone number.
• Consent records: timestamp and source recording that our Customer represented they have permission to message this person.
• Review content the End User submits on a public review page we host: star rating, review body, display name, optional private feedback.
• Message delivery events from our messaging providers (sent, delivered, failed, opened, clicked).
• Basic technical data when a public review page or embedded widget is loaded: IP address, user agent, and timestamp — used for abuse prevention.

• To operate the core service: send SMS and email review requests on behalf of our Customers, host public review pages, render embeddable review widgets, and run the Customer dashboard.
• To deliver outbound SMS through Twilio Inc. and outbound email through our email provider, on behalf of our Customers.
• To auto-share reviews to a Customer's connected Facebook Page when the Customer explicitly opts in. Only five-star reviews are eligible for auto-sharing, and only to the Page the Customer has connected.
• To prevent abuse, enforce our Terms of Service, debug operational issues, and respond to support requests.
• To send Customers product updates, billing notices, and security alerts.

We do not sell, rent, share, or otherwise transfer mobile phone numbers, SMS opt-in records, or SMS consent data to any third party or affiliate for marketing or promotional purposes. This restriction applies to all categories of personal information we collect and is unconditional with respect to mobile opt-in data.

Mobile phone numbers and SMS consent data are used solely to deliver the messages our Customers have asked us to send and to honor opt-out and HELP requests. Information sharing with subcontractors strictly in support of our service (for example, our SMS gateway Twilio, which is required to actually transmit the message) is permitted; those subcontractors are contractually bound to use the information only to provide their services to Rep360.

End Users receive SMS messages from Rep360 only after the Customer has represented that the End User has consented to receive such messages. End Users may opt out at any time by replying STOP to any message; they may text HELP for assistance. See the SMS Program Disclosures in our Terms of Service for full keyword behavior, message frequency, and rate-disclaimer text.

We share information only as described below. We do not sell personal information.

• Service providers / subprocessors, strictly to run the service:
  • Supabase, Inc. — managed database, authentication, and storage hosting.
  • Vercel Inc. — application hosting and edge compute.
  • Twilio Inc. — SMS message transmission and delivery receipts.
  • Google LLC — when a Customer connects Google Business Profile, we exchange data with Google APIs under the scopes you authorized.
  • Meta Platforms, Inc. — when a Customer connects Facebook, we exchange data with the Facebook Graph API under the scopes you authorized.
• At a Customer's direction.When an End User submits a review on a public review page, we display that review on the page and (if the Customer has enabled auto-sharing and the rating is eligible) post it to the Customer's connected social profile.
• Legal requirements. We may disclose information if required by law, subpoena, or to protect the rights, safety, or property of Servgrow LLC, our Customers, or the public.
• Business transfers. If Servgrow is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you and (where required) seek consent.

We use strictly necessary cookies to keep Customers signed in and to protect the service from abuse. We do not use third-party advertising cookies on the Rep360 application or on the public review pages we host on behalf of Customers.

We retain Customer account data, End User contact records, and submitted reviews for as long as the Customer account is active. When a Customer deletes their account or asks us to delete their data, we remove it from production systems within 30 days, except where we are legally required to retain it (for example, tax or billing records).

End User SMS opt-out records (STOP receipts) are retained indefinitely as a compliance record; we never re-message a number that has opted out, even after a Customer account is deleted.

OAuth tokens for Google and Facebook are deleted immediately when the Customer disconnects the integration, when the Customer deletes their account, or — for Facebook — when Facebook notifies us via the data-deletion callback.

• Access, correction, deletion.Customers can access and update most account data from within the application. For deletion or for data we don't expose in the UI, contact us at the address below.
• SMS opt-out. End Users can reply STOP to any message to opt out of further messages from the sending Customer. Opt-outs are enforced platform-wide for that Customer.
• Marketing email opt-out. Customers can unsubscribe from product marketing email from the link in any such email. Transactional email (billing, security, account) cannot be opted out of while the account is active.
• Region-specific rights. Residents of California (CCPA/CPRA), the EEA / UK (GDPR), and certain other jurisdictions may have additional rights including portability, objection to processing, and the right to lodge a complaint with a supervisory authority. Email us to exercise those rights.

You can delete your data at any time. Customers can email us at randy@sodermanmarketing.com from the email address on the account, or follow the step-by-step instructions at /data-deletion. End Users whose data is held by a specific Rep360 Customer should contact that Customer directly; we will assist on request.

We use industry-standard security practices to protect your data, including encrypted transport (TLS), encryption at rest for sensitive fields, scoped access tokens for third-party APIs, and role-based access controls on our database. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you in accordance with applicable law.

Rep360 is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Servgrow LLC is based in the United States and processes data on servers located in the United States. By using Rep360 from outside the United States, you consent to your data being transferred to and processed in the United States.

We may update this policy from time to time. If we make material changes, we will notify Customers by email or in-app notice before the change takes effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

Privacy questions, deletion requests, or other inquiries:

Servgrow LLC — Rep360
Email: randy@sodermanmarketing.com