Privacy policy

1. About this policy

This Privacy Policy explains how Awesome Tools LLC (“RepuTend”, “we”, “us”) collects, uses, shares, keeps and protects information when you use the RepuTend website at reputend.com, the RepuTend MCP server and API at mcp.reputend.com, the free audit and the RepuTend Evidence plugin for WordPress (together, the “Service”).

RepuTend handles information about three groups of people: the businesses that use it and their teams; visitors to the website and people who run the free audit; and people who write reviews on Trustpilot about the businesses RepuTend watches. This policy covers all three.

2. Summary

• We use account information to provide RepuTend, check that you speak for your business, bill you and help you.
• RepuTend collects public reviews from Trustpilot, with the reviewer’s public details: display name, country and review history. It doesn’t collect reviewers’ email addresses.
• If you connect your billing platform, your customer records stay on your server. RepuTend receives a verdict only.
• When you use RepuTend through an AI assistant such as Claude or ChatGPT, the assistant’s own privacy policy applies to what it receives.
• We don’t sell personal information.
• Anyone who wrote a review RepuTend has collected can ask us to erase their data (see section 7).

3. Information we collect

Visitors to reputend.com

The website is a set of static pages. It runs no analytics or advertising trackers and sets no cookies of its own. Cloudflare, which hosts it, processes the information browsers send with every request, such as IP address, browser type and the page requested, to serve and protect the site.

The free audit, subscribing and access requests

To run a free audit you give a Trustpilot business domain. We use the IP address of each request to limit how often audits can be started, and we don’t store it in our database. When you use RepuTend from an AI assistant, that address usually belongs to the assistant’s provider rather than to you. We keep audit results by domain and reuse a recent one when the same domain is audited again.

When you subscribe or request access, you give your business’s Trustpilot domain and your email address. We keep both to set up the account, check that you speak for the business and contact you about your request. If you subscribe, the person with that email becomes the account owner once you pay.

Accounts, teams and billing

For each customer we keep:

• the email addresses of the account owner and of the team members they invite, with when each was invited and joined;
• access keys, stored only as hashes, so we can’t read them back;
• the plan, billing status, and Stripe customer and subscription identifiers;
• your answers to the business profile questions, and your settings, such as whether filing needs your approval;
• a record of each report: who filed it and when, what Trustpilot decided, and any appeal statement with the name of the person who gave it;
• emails you send to support.

Stripe processes payments. We never receive or store full card numbers.

Trustpilot reviews and reviewers

For each business RepuTend watches, it collects public information from Trustpilot through a third-party data provider. That includes businesses in our index of Trustpilot profiles that are not customers. For each review it keeps:

• the title, text, rating, language and dates, every later edit, and whether the review is still live or has been removed;
• the business’s public reply;
• the reviewer’s public Trustpilot ID, display name and country, how many reviews they have written, and whether Trustpilot marks the account as verified;
• the reviewer’s public reviews of other businesses (which business, the rating and the date, but not the text), used to spot patterns such as one account reviewing many businesses in the same category. RepuTend also compares the texts of those reviews to spot copied wording, and keeps only the result.

RepuTend doesn’t collect reviewers’ email addresses. An address written into a review’s text stays part of that review. A free audit reads recent reviews to count the likely disputable ones, and doesn’t add them to this record.

If Trustpilot asks a reviewer for details and the business shares the reviewer’s reply with us, we keep that reply with the case. Identifying details in it, such as an order number, go to the business’s own server for the check described below, and we don’t store them.

Connected billing platforms

If a business connects its billing platform through the RepuTend Evidence plugin, RepuTend sends the business’s own server the reviewer’s display name and country, the review’s date, and details mentioned in the review, such as an order number. The plugin searches the store’s records on that server and answers with a verdict only: match confidence, and purchase, license, refund and subscription status, with purchase dates rounded to the quarter. Names, emails, order numbers and amounts never leave the business’s site.

We keep the verdict with the case. The secret that signs these requests is stored encrypted.

Your AI assistant

RepuTend works inside AI assistants such as ChatGPT, Codex and Claude. The assistant sends RepuTend the tool you asked for and its inputs, and RepuTend sends back the result. A result can include review text and reviewer display names from your profile. The assistant may show, store or process what it receives under its own privacy policy and settings.

Activity logs and error reports

RepuTend records each step it takes on a review or case, so that any decision can be reviewed later. These records point to reviews and cases by ID and don’t copy review text. We also keep the inputs and outputs of AI model calls for the same reason, and those can include review text. Error reports and request traces go to Sentry and exclude request bodies, cookies and user details.

Feedback

When you send feedback through your AI assistant, we keep the message, the tool it is about, the email address you give for a reply, if any, and the name of the assistant app. If you use a RepuTend access key, we also keep which account sent it. We read feedback to fix problems and improve the Service.

4. How we use information

We use the information described above to:

• watch the Trustpilot profiles of businesses that use RepuTend, screen reviews and prepare filing packets;
• file reports and follow them to Trustpilot’s decision;
• check that a person speaks for a business;
• sign in users, manage teams and keep access keys secure;
• bill customers and manage subscriptions through Stripe;
• send invitations with sign-in details and other service emails;
• run free audits and limit how often they can be started;
• keep an index of businesses on Trustpilot that RepuTend could help;
• find and fix errors, prevent abuse and improve the Service;
• comply with legal obligations, enforce our terms, and protect the rights, safety and security of RepuTend, our users and others.

5. Who receives information

We share information only as the Service needs it, as you ask, or for legal and security reasons.

We may also disclose information to professional advisors, to authorities when the law requires it or to protect rights and security, and to a successor in a merger, acquisition, financing or sale of assets. We don’t sell personal information.

6. Data retention

RepuTend doesn’t delete data automatically. Current practice:

• Reviews and reviewer details are kept, including reviews Trustpilot later removes, because they are the record of each report and each removal fee. A reviewer can ask us to erase them (see section 7).
• Account, team and case data are kept while you are a customer and after you cancel, so everything is there if you subscribe again.
• Access requests are kept as the record of who asked for access to a business.
• The sign-in code in an invitation email works for 7 days.
• Billing records are kept as accounting, tax and other legal obligations require.
• Error reports are kept under Sentry’s retention settings for our account.

7. If you wrote a review on Trustpilot

RepuTend collects public reviews and public reviewer details as described in section 3. It never contacts reviewers directly, and it doesn’t collect their email addresses.

Erasing your data from RepuTend doesn’t change anything on Trustpilot. To take a review down from Trustpilot, delete it there.

8. Your controls and choices

• The account owner can invite and remove team members from the AI assistant.
• If you think someone else has your access key, ask us to revoke it.
• You can deactivate the RepuTend Evidence plugin at any time to stop the billing-record check.
• You can remove RepuTend as a user on your Trustpilot Business account at any time.
• You can require your approval before anything is filed.
• You can disconnect RepuTend in your AI assistant’s connector settings. The assistant’s own settings govern how long it keeps your conversations.
• You can contact us to ask for access to, correction, export or deletion of your account data.

9. Security

We protect information with HTTPS and store access keys only as hashes. The secret for each connected billing platform is stored encrypted, and requests to the evidence plugin are signed and expire after a short time. Our own admin tools sit behind access controls, and we monitor for errors and abuse. No online service is perfectly secure. You are responsible for the access you grant RepuTend and for keeping your access keys safe.

10. Cookies

The RepuTend website sets no cookies of its own, and the Service signs you in with access keys rather than cookies. Cloudflare may set cookies it needs to protect the site from abuse.

11. Aggregated statistics

We may publish aggregated statistics, such as how often Trustpilot removes reviews reported for a given reason. They don’t identify any user or reviewer.

12. International processing

We and our service providers may process information in the United States and other countries where we or they operate, including on Cloudflare’s global network. Those countries may have privacy laws different from those where you live.

13. Your rights

Depending on where you live, you may have rights under the GDPR and other privacy laws to access, correct, delete, restrict, port or object to certain processing of your personal information, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at the address below. We may need to verify your request, and we may keep information where the law requires or permits it, for example for security, fraud prevention, billing or dispute resolution.

14. Children

The Service is for businesses and isn’t directed to children under 13. We don’t knowingly collect personal information from children under 13. If we learn we have, we will delete it.

15. Business transfers

If RepuTend or substantially all of its assets are acquired, merged, financed, reorganized or sold, information may be among the assets transferred, subject to this policy or a policy with materially similar protections.

16. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it last changed. If you keep using the Service after a change takes effect, you accept the updated policy.

17. Contact

Send questions and privacy requests to support@reputend.com.