Privacy Policy

Last updated: April 2026  ·  Kusa Connect Ltd  ·  Registered in England & Wales

1. Who we are

RepBud is operated by Kusa Connect Ltd, a company registered in England and Wales. References to "RepBud", "we", "us" or "our" in this policy refer to Kusa Connect Ltd.

Contact: graeme@repbud.app

2. Data we collect

Account data

• Email address and password (used to create and authenticate your account)
• Name and professional role (provided during onboarding)
• Billing currency preference
• Profile photo (optional, uploaded by you)

Professional data you add

• Contact records (names, job titles, email addresses, phone numbers, companies)
• Interaction logs (notes, meeting records, call logs)
• Tasks and action items
• Trip plans and itineraries
• Uploaded documents and business card scans

Usage data

• Feature usage patterns (which screens you use, how often)
• App performance and error logs
• Device type and operating system (for debugging)
• Push notification tokens (to deliver your daily briefing and reminders)

Payment data

Payments are processed by Stripe. We do not store card details. We receive and store subscription status, tier, billing currency and transaction references only.

3. Google Gmail integration

What we do not access: RepBud does not read your inbox, access your sent items, read email metadata, access contacts from Gmail, or request any scope beyond gmail.send. We cannot and do not access any Gmail data other than what is needed to send a message you have explicitly composed within the RepBud app.

How it works: When you compose and send an email from within RepBud, the message content is passed directly to the Gmail API send endpoint using your OAuth token. The content of your emails is not stored on RepBud servers beyond the interaction log entry you choose to create yourself.

Token storage: Your Gmail OAuth token is stored securely in our database (Supabase, hosted in Frankfurt, Germany). It is used solely to call the Gmail send endpoint. It is never shared with third parties.

Revoking access: You can disconnect Gmail from RepBud at any time in Profile → Email Settings. You can also revoke access directly from your Google Account permissions page. Revoking access does not delete your RepBud account or any other data.

Gmail data use limitations: RepBud's use of Gmail data is limited to sending emails the user has explicitly composed. We do not use Gmail data to serve advertising, train AI models, or share with third parties. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use your data

• To provide and operate the RepBud service
• To generate AI-assisted content (interaction summaries, reports, briefings) using data you have provided — processed via Anthropic's Claude API
• To send transactional emails (receipts, account notifications) via Postmark
• To deliver push notifications you have enabled
• To process subscription payments via Stripe
• To improve the service through anonymised usage analytics
• To respond to support requests

5. AI processing

RepBud uses Anthropic's Claude AI to generate summaries, reports, briefings and follow-up drafts. When AI features process your data, the relevant content (such as your interaction notes or contact information) is sent to Anthropic's API. Anthropic's data handling is governed by their privacy policy. We do not use your data to train AI models.

6. Where your data is stored

Your data is stored on Supabase infrastructure hosted in Frankfurt, Germany (EU). This means your data is subject to EU data protection standards. Stripe and Anthropic may process data in the United States under appropriate safeguards.

7. Data sharing

We do not sell your data. We share data only with:

• Supabase — database and storage (Frankfurt, EU)
• Anthropic — AI processing of content you submit for AI features
• Stripe — payment processing
• Postmark — transactional email delivery
• Google — Gmail send API, when you have connected your Gmail account
• Apple / Google — push notification delivery via APNs and FCM

All processors are bound by data processing agreements and applicable data protection law.

8. Data retention

• Account and professional data: retained while your account is active
• Forwarded emails: 90-day rolling retention
• Deleted account data: purged within 30 days of account deletion request
• Anonymised usage analytics: retained indefinitely

9. Your rights (UK GDPR)

As a UK resident, you have the right to:

• Access — request a copy of data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a portable format
• Restriction — limit how we process your data
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email graeme@repbud.app. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Cookies

Our mobile app does not use cookies. Our website (repbud.app) uses essential cookies only. See our Cookie Policy for details.

11. Children

RepBud is intended for professional use and is not directed at anyone under 18. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy from time to time. We will notify active users of material changes by email or in-app notification. The date at the top of this page reflects the most recent update.