Privacy Policy

RepBud is operated by Charnette Ltd, a company registered in England and Wales. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it.

1. Who we are

RepBud is a product of Charnette Ltd, registered in England and Wales. Our registered address is available on request.

For privacy matters, contact us at: privacy@repbud.app

2. What data we collect

We collect the following categories of personal data:

• Account information — your name, email address and password (encrypted)
• Profile information — your company name, job role and market preferences
• Interaction logs — notes, emails and WhatsApp messages you log through RepBud
• Contact data — names, emails, phone numbers and company details of your professional contacts
• Usage data — how you use the app, features accessed, and session information
• Billing information — processed securely by Stripe; we never store your card details
• Device information — device type, operating system and app version for support purposes

3. How we use your data

We use your data solely to provide and improve the RepBud service:

• To operate your account and deliver the RepBud features you use
• To process AI-assisted features (interaction summaries, reports, meeting prep) via Anthropic's Claude API
• To send transactional emails (confirmations, reports, newsletters you create) via Postmark
• To process payments via Stripe
• To send you product updates and notifications — you can opt out at any time
• To investigate and resolve support issues
• To comply with legal obligations

We do not use your data for advertising. We do not sell your data to third parties. Ever.

4. AI processing

RepBud uses Anthropic's Claude AI to power features including interaction summaries, client reports, meeting preparation and newsletter drafting.

When you use these features, relevant data is sent to Anthropic's API for processing. Anthropic does not use your data to train their AI models. Data is processed transiently and not stored by Anthropic beyond the duration of the API call.

You can review Anthropic's privacy policy at anthropic.com/privacy.

5. Data storage and security

Your data is stored on Supabase infrastructure located in Frankfurt, Germany (EU). This means your data is subject to EU data protection standards and GDPR.

• All data is encrypted in transit using TLS
• All data is encrypted at rest
• Row Level Security (RLS) ensures users can only access their own data
• Passwords are hashed and never stored in plain text
• Access to production systems is strictly controlled

RepBud is designed so that your data is isolated from other users. Only you can see your contacts, logs, and interaction history.

6. Third-party services

We use the following third-party services to operate RepBud:

• Supabase (Frankfurt, EU) — database and authentication
• Anthropic — AI processing for intelligent features
• Stripe — payment processing
• Postmark — transactional email delivery
• Cloudflare — web hosting, DNS and security
• Twilio — WhatsApp message processing
• Meta (WhatsApp Business API) — WhatsApp integration

Each of these providers operates under their own privacy policies and data processing agreements. We have selected providers that meet high standards for data security and privacy.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (for example, billing records).

Interaction logs, contacts and notes are deleted immediately upon account deletion.

8. Your rights (GDPR)

As a user in the UK or EU, you have the following rights under GDPR:

• Right of access — request a copy of all data we hold about you
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to data portability — receive your data in a machine-readable format
• Right to restrict processing — limit how we use your data
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent

To exercise any of these rights, email privacy@repbud.app. We will respond within 30 days.

9. Cookies

RepBud uses essential cookies only — these are required for authentication and to keep you signed in. We do not use advertising cookies or third-party tracking cookies.

The web platform (repbud.app) uses Cloudflare's security services which may set cookies for bot protection purposes.

10. Children's privacy

RepBud is a professional tool intended for adults working in the travel industry. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has created an account, please contact us immediately at privacy@repbud.app.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email and by updating the "last updated" date at the top of this page.

Your continued use of RepBud after changes are posted constitutes acceptance of the updated policy.

12. Contact us

For any privacy-related questions, data requests, or to request a Data Processing Agreement (DPA) for your organisation, please contact: