Legal
Privacy Policy
Last updated: 4 June 2026
This policy explains what personal data RepSaaS Ltd(“RepSaaS”, “we”, “us”) collects, why we collect it, who we share it with, and the rights you have over it. RepSaaS is currently in closed beta, and today the personal data we hold is limited to waitlist sign-ups and basic website analytics.
1. Who we are
RepSaaS Ltd is the data controller for the personal data described in this policy. RepSaaS is a white-label review management platform for agencies, currently in closed beta and planned for general availability in 2026. If you have any questions about this policy or how we handle your data, contact us at privacy@repsaas.com.
2. The data we collect
Waitlist sign-ups
When you join our waitlist, we collect the information you provide in the form: your name, your email address, and (optionally) your phone number. We also record a non-identifying source / referral attribute(for example, a UTM campaign value or “Organic”) so we understand how people find us.
We use a third-party email platform, Loops (Loops, Inc.), to store this information and to send you updates about the closed beta and launch. Your waitlist data is transmitted to and stored by Loops on our behalf. See Loops’ privacy policy for details of their processing.
Website usage and analytics
When you visit this website we may collect standard technical information such as your IP address, browser type, device type, the pages you view, and the site that referred you. We use this in aggregate to understand traffic and improve the site. See our Cookie Policy for the specifics of cookies and analytics technologies in use.
Information you send us directly
If you email us or contact us through our community, we keep that correspondence and any personal data it contains so we can respond and keep a record of our conversation.
3. How and why we use your data
- To run the waitlist — to add you to the founding-agency waitlist, keep you updated on the beta and launch, and contact you about access. Lawful basis: your consent, and our legitimate interest in operating the waitlist.
- To operate and improve the website — to keep the site secure, diagnose problems, and understand how it is used. Lawful basis: our legitimate interest in a working, secure website.
- To communicate with you — to respond to your enquiries and provide support. Lawful basis: our legitimate interest in responding to you, or performance of a contract where one exists.
- To comply with the law — where we are legally required to retain or disclose information. Lawful basis: compliance with a legal obligation.
We do not sell your personal data, and we do not use it to build advertising profiles.
4. Google user data and Limited Use
RepSaaS plans to offer an integration that lets agencies connect their (or their clients’) Google Business Profileaccounts so that reviews can be collected, displayed, and responded to from within the platform. This integration uses Google’s OAuth APIs. The following disclosures apply to that integration:
What we access.With your explicit authorisation, RepSaaS requests access only to the Google Business Profile data needed to provide the service — such as your business locations, the reviews on those locations, and the ability to post review replies on your behalf. We request the minimum scopes required and only after you grant consent through Google’s standard OAuth screen.
Limited Use.RepSaaS’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for serving advertisements; we do not sell Google user data; we do not transfer it to others except as necessary to provide or improve the integration, to comply with the law, or as part of a merger or acquisition; and we do not allow humans to read your Google data unless we have your consent for specific items, it is necessary for security or to comply with the law, or the data is aggregated and anonymised.
You can revoke RepSaaS’s access to your Google account at any time from your Google Account permissions page, or by contacting us to disconnect the integration. While the Google Business Profile integration is in development during the beta, this section describes how it will operate once enabled.
5. Sharing and processors
We share personal data only with service providers that process it on our behalf, under contract and on our instructions. These currently include:
- Loops — email and waitlist management (name, email, phone, source).
- Google Cloud — the infrastructure RepSaaS is built and hosted on.
- Vercel — hosting and delivery of this website.
- Analytics provider(s) — as described in our Cookie Policy.
We may also disclose personal data where required by law, to enforce our terms, or to protect the rights, property, or safety of RepSaaS, our users, or others.
6. International transfers
Some of our processors are based outside the UK and EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, so your data continues to receive an equivalent level of protection.
7. How long we keep it
We keep waitlist data for as long as you remain on the waitlist or a RepSaaS user, and for a reasonable period afterwards, unless you ask us to delete it sooner. You can unsubscribe at any time using the link in our emails, which removes you from the active waitlist. We keep correspondence and analytics for only as long as needed for the purposes above.
8. Your rights
Under UK GDPR and applicable data-protection law, you have the right to:
- Access the personal data we hold about you.
- Rectify data that is inaccurate or incomplete.
- Eraseyour data (“the right to be forgotten”).
- Restrict or object to certain processing, including direct marketing.
- Port your data to another provider where applicable.
- Withdraw consent at any time, without affecting prior processing.
To exercise any of these rights, email privacy@repsaas.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
9. Children
RepSaaS is a business-to-business product and is not directed at children. We do not knowingly collect personal data from anyone under 16.
10. Changes to this policy
We may update this policy as RepSaaS evolves — particularly as the Google Business Profile integration and other features ship. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you by email.