01 Overview
ReputeDesk ("we," "us," or "our") is a reputation management platform operated by Augment LLC, a Michigan limited liability company. ReputeDesk is accessible at reputedesk.io.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform — including our website, web application, and any related services (collectively, the "Service").
By using ReputeDesk, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
02 Information We Collect
Information You Provide Directly
- Name, email address, and password when you register an account
- Business name, type, and location details when you set up your profile
- Brand voice preferences, tone settings, and escalation rules you configure
- Payment information (processed securely via our payment processor — we do not store card details)
- Communications you send to us via email or the demo request form
Information Collected Automatically
- IP address, browser type, operating system, and device identifiers
- Pages visited, features used, and time spent in the platform
- Referring URLs and exit pages
- Error logs and performance data to help us fix issues
Information from Third-Party Platforms
When you connect a review platform (such as Google Business Profile, Yelp, or Facebook), we collect:
- Reviews and ratings posted about your business on those platforms
- Reviewer display names and review content (as publicly visible on those platforms)
- Your business profile information (name, address, rating summary)
- OAuth access tokens required to read and respond to reviews on your behalf
| Data Type | Source | Why We Collect It |
|---|---|---|
| Account details | You | Create and manage your account |
| Business profile | You + connected platforms | Personalize AI responses to your brand |
| Review content | Google, Yelp, Facebook etc. | Generate responses and surface insights |
| OAuth tokens | Google / platform OAuth flow | Post responses on your behalf |
| Usage analytics | Automatically | Improve the platform and fix bugs |
| Payment info | You (via payment processor) | Process subscription payments |
03 Google Data & OAuth
ReputeDesk integrates with Google APIs, including the Google Business Profile API, to enable you to read and respond to Google reviews from within our platform. This section specifically addresses how we handle data obtained through Google OAuth.
What Google Data We Access
- Your Google account's email address and display name (to identify your account)
- Your Google Business Profile locations linked to your Google account
- Customer reviews posted on your Google Business Profile(s)
- The ability to post replies to those reviews on your behalf
How We Use Google Data
- To display your reviews inside the ReputeDesk dashboard
- To generate AI-powered response drafts for your approval
- To post approved responses back to Google on your behalf
- To generate sentiment analysis and business intelligence reports
Google Data We Do NOT Use
- We do not access your Gmail, Google Drive, Google Calendar, or any Google service beyond what is necessary to manage your Google Business Profile reviews
- We do not sell, rent, or share your Google data with third parties for marketing purposes
- We do not use Google data to build advertising profiles
- We do not retain Google user data beyond what is necessary to operate the Service
Revoking Google Access
You can revoke ReputeDesk's access to your Google account at any time by visiting myaccount.google.com/permissions and removing ReputeDesk. You can also disconnect your Google account from within your ReputeDesk account settings. Upon disconnection, we will delete your stored OAuth tokens within 30 days.
04 How We Use Your Data
We use the information we collect for the following purposes:
To Provide and Operate the Service
- Create and manage your account
- Connect to your review platforms and retrieve your reviews
- Generate AI-powered response drafts in your brand voice
- Post approved responses to connected platforms on your behalf
- Send escalation alerts when reviews require human attention
- Generate business intelligence reports and sentiment analysis
To Improve the Service
- Analyze usage patterns to identify and fix bugs
- Improve AI response quality and accuracy over time
- Develop new features based on how customers use the platform
To Communicate With You
- Send transactional emails (review alerts, response approvals, billing receipts)
- Respond to your support requests and inquiries
- Send product updates and feature announcements (you can opt out)
To Comply With Legal Obligations
- Maintain records as required by law
- Respond to valid legal requests from law enforcement or courts
- Enforce our Terms of Service and protect against fraud or abuse
05 Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:
Service Providers
We share data with trusted third-party vendors who help us operate the Service, under strict confidentiality obligations. These include:
- Cloud infrastructure — Amazon Web Services (AWS) for hosting and storage
- AI processing — AI model providers for generating review responses
- Payment processing — Stripe for billing (they handle payment data directly)
- Email delivery — transactional email providers for sending alerts and notifications
- Analytics — privacy-respecting analytics tools to understand platform usage
Connected Review Platforms
When you approve a response, we transmit that response to the relevant review platform (e.g. Google, Yelp) on your behalf. This is the core function of the Service and you explicitly authorize this transmission each time you approve a reply.
Business Transfers
If Augment LLC is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your data is transferred or becomes subject to a different privacy policy.
Legal Requirements
We may disclose your information if required to do so by law or in good-faith belief that such action is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the safety of our users or the public.
06 Data Retention
We retain your data for as long as your account is active or as needed to provide you the Service. Specifically:
- Account data — retained for the life of your account, plus 90 days after deletion to allow for recovery
- Review data — retained while your account is active; deleted within 60 days of account closure
- OAuth tokens — deleted within 30 days of disconnecting a platform or closing your account
- AI-generated responses — retained to improve response quality; anonymized after 12 months
- Payment records — retained for 7 years as required by US tax law
- Support communications — retained for 2 years to maintain support history
You may request deletion of your data at any time by contacting us at privacy@reputedesk.io. We will process deletion requests within 30 days.
07 Security
We take reasonable and appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS 1.2 or higher
- Encryption of sensitive data at rest (including OAuth tokens)
- Access controls limiting employee access to customer data on a need-to-know basis
- Regular security reviews of our infrastructure and code
- AWS security best practices for our cloud infrastructure
08 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
For All Users
- Access — request a copy of the personal data we hold about you
- Correction — request that we correct inaccurate or incomplete data
- Deletion — request that we delete your personal data (subject to legal retention requirements)
- Portability — request your data in a machine-readable format
- Opt-out — unsubscribe from marketing emails at any time via the unsubscribe link in any email
- Revoke platform access — disconnect any review platform from your account settings at any time
For California Residents (CCPA)
Under the California Consumer Privacy Act, California residents have additional rights including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights.
For EEA / UK Residents (GDPR)
If you are located in the European Economic Area or United Kingdom, you have rights under GDPR including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing is typically contract performance (to provide the Service you signed up for) and legitimate interests (to improve the Service and prevent abuse).
To exercise any of your rights, contact us at privacy@reputedesk.io. We will respond within 30 days.
09 Cookies
We use cookies and similar tracking technologies to operate the Service. Here's what we use:
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Essential | Keep you logged in, maintain session state, CSRF protection | No — required for the Service to function |
| Functional | Remember your preferences (language, timezone, display settings) | Yes — via browser settings |
| Analytics | Understand how users navigate the platform to improve it | Yes — opt out via browser settings or our cookie banner |
We do not use advertising cookies or allow third-party advertisers to place cookies on our platform. You can control cookies through your browser settings, though disabling essential cookies may prevent the Service from functioning correctly.
10 Children's Privacy
ReputeDesk is a business-to-business service intended for use by business owners and marketing professionals. The Service is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13.
If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we may have such information, please contact us at privacy@reputedesk.io.
11 Third-Party Services
Our Service integrates with and links to third-party services. This policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you connect to through ReputeDesk:
- Google — policies.google.com/privacy
- Yelp — yelp.com/tos/privacy
- Facebook / Meta — facebook.com/privacy/policy
- Stripe — stripe.com/privacy
- Amazon Web Services — aws.amazon.com/privacy
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Send an email notification to all active account holders
- Display a prominent notice in the platform for 30 days following the change
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you should discontinue use of the Service and contact us to close your account.
We encourage you to review this Privacy Policy periodically. Previous versions are available upon request.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: