Legal / privacy
Privacy Policy
This policy explains what Repfolio processes, why it is needed, and the choices available to users and catalog visitors.
Effective 11 August 2026
Data we collect
We process account email and profile details; spreadsheets, source URLs, images, notes, tags, affiliate codes, catalogs, and settings; subscription identifiers and status; export and integration records; and security logs. Stripe handles full payment-card details. Optional Google access is limited to files Repfolio creates or opens through the integration.
Catalog visitors
Published catalogs use a random first-party visitor identifier stored in the browser to count page views and outbound clicks. Repfolio does not store raw visitor IP addresses in analytics events. An IP-derived hash may be used briefly for abuse prevention and rate limiting.
Why we process data
We process data to perform our contract with account holders, secure and improve the service, prevent abuse, provide support, meet legal duties, and—with consent where required—remember visitor analytics choices. We do not sell personal information or use third-party advertising trackers.
Providers and transfers
Repfolio uses Supabase for authentication, database, and storage; Stripe for billing; Google for optional Sheets exports; and hosting and job-processing providers needed to operate the service. These providers may process data outside your country under their contractual transfer safeguards.
Retention
Account content is retained while the account is open. Revoked extension tokens and operational security records may be retained for up to 90 days. Billing and legal records may be retained as required by tax, accounting, fraud-prevention, or legal obligations. Backup copies are deleted on the provider's normal rotation.
Your choices and rights
You can unpublish catalogs, remove codes, revoke extension tokens, disconnect Google, export your spreadsheet data, and request account deletion. Depending on your location, you may also request access, correction, portability, restriction, or objection. Contact privacy@repfolio.cc. You may complain to your local data-protection authority.
Security and children
Repfolio uses access controls, row-level database policies, encryption in transit, and restricted service credentials. No online service is risk-free. Repfolio is not directed to children under 13, or the higher minimum age required in their country.
Contact
Privacy questions and rights requests: privacy@repfolio.cc. Security reports: security@repfolio.cc. Repfolio is currently operated as an independent service; formal operator details and a service address will be added when business registration is completed.
Need help? Contact Repfolio.