Data Privacy Policy

1. Purpose

This Data Privacy Policy supplements our Privacy Policy and provides additional details about how Reputraq Technologies (“we,” “us,” or “our”) processes personal data in compliance with the General Data Protection Regulation (GDPR), the Digital Personal Data Protection Act (DPDPA) 2023, and other applicable data protection laws. This policy also covers data collected through our advertising campaigns on Meta (Facebook/Instagram) and other platforms.

2. Data Controller

Reputraq Technologies is the data controller for personal data processed through the Service and our advertising campaigns. For any data protection inquiries, contact us at privacy@reputraq.com.

3. Legal Basis for Processing

We process personal data under the following legal bases:

Consent: When you sign up, opt into marketing communications, or interact with our ads
Contract performance: To provide the Service you subscribed to
Legitimate interest: To improve our Service, prevent fraud, and conduct analytics
Legal obligation: To comply with applicable laws and regulations

4. Advertising and Meta Ads Data

4.1 Data Collected via Advertising

When you interact with our advertisements on Meta (Facebook/Instagram), Google, or other advertising platforms, the following data may be collected:

Ad interaction data (clicks, impressions, conversions)
Device and browser information
IP address and approximate location
Information you voluntarily provide through lead forms

4.2 Use of Advertising Data

Advertising data is used to:

Measure advertising campaign effectiveness
Optimize ad targeting and delivery
Create lookalike and custom audiences for marketing
Provide you with relevant product information

4.3 Meta Pixel and Conversions API

We use Meta Pixel and Conversions API to track conversions from our Facebook and Instagram ads. This involves sharing limited data (such as hashed email addresses and event data) with Meta Platforms, Inc. for ad measurement and optimization. You can opt out of this tracking through your Facebook Ad Settings or by using the Meta Off-Facebook Activity tool.

4.4 Advertising Data Retention

Advertising interaction data is retained for a maximum of 24 months. Lead form data is retained until you unsubscribe or request deletion. Hashed data shared with advertising platforms is governed by each platform's own data retention policies.

5. Data Processing Activities

Activity	Data Types	Legal Basis	Retention
Account registration	Name, email	Contract	Account lifetime
Reputation monitoring	Public mentions, keywords	Contract	Per subscription plan
Sentiment analysis	Text content, scores	Contract	Per subscription plan
Payment processing	Transaction data	Contract	7 years (tax)
Ad campaigns (Meta)	Interaction, device data	Consent	24 months
Analytics	Usage, device data	Legitimate interest	26 months

6. Third-Party Data Processors

We work with the following categories of data processors:

Cloud infrastructure: Vercel (hosting), Supabase (database and authentication)
Payment processing: Dodo Payments
Advertising platforms: Meta Platforms (Facebook/Instagram Ads), Google Ads
Analytics: Privacy-respecting analytics tools
Data APIs: SerpAPI for public data aggregation

All processors are bound by data processing agreements ensuring GDPR-equivalent protections.

7. Cross-Border Data Transfers

Data may be transferred to and processed in:

India (primary operations)
United States (Vercel, Supabase infrastructure)
European Union (for EU-based users)

Transfers are safeguarded through Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.

8. Your Data Rights

Under GDPR, DPDPA, and other applicable laws, you have the following rights:

Right to Access: Request a copy of all personal data we hold about you
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interest
Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at privacy@reputraq.com. We will respond within 30 days.

9. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, in accordance with GDPR Article 33 and 34.

10. Opt-Out of Advertising Tracking

You can opt out of advertising-related tracking through:

Facebook Ad Settings: Control how Facebook uses your data for ads
Meta Off-Facebook Activity: Clear and manage data shared with Meta
Google Ad Settings: Manage personalized advertising preferences
Browser settings: Disable third-party cookies
Device settings: Limit ad tracking on iOS/Android

11. Updates to This Policy

This policy is reviewed quarterly and updated as needed. Material changes will be communicated via email and in-app notification at least 14 days before taking effect.

12. Contact Information

Data Protection Officer: privacy@reputraq.com

Reputraq Technologies
Chennai, Tamil Nadu, India