Privacy Policy

RepScale (“we,” “us,” or “our”) operates the RepScale platform at repscale.ai and the web application at the domain associated with your account. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. By using RepScale, you agree to the practices described here.

Not legal advice. This policy is written to be readable, not as a substitute for legal counsel. If your organization has specific compliance requirements, consult an attorney.

1. Information We Collect

Account and identity information

When you sign up, we collect your email address, first name, and last name. Authentication, including password hashing, session management, and any OAuth tokens if you sign in via Google or another provider, is handled by Clerk, our identity provider. RepScale never sees or stores your password. Clerk is SOC 2 Type II certified.

Account and subscription data

We store your plan tier (Free or Pro), subscription status, and a reference ID linking your account to Stripe. We do not store full card numbers or billing addresses. Those live in Stripe's PCI-compliant environment.

Content you create

Everything you generate inside RepScale is stored in our database: prospect research briefs, email drafts, meeting prep sheets, cadence sequences, CRM interaction logs, and any text or files you upload as input. This data is tied to your account and used to power features like History.

Note on prospect data: The research inputs and outputs you create may contain information about third parties (prospect names, company details, contact information). You are responsible for ensuring your use of that data complies with applicable laws and any relevant data agreements.

Usage and analytics data

We use Google Analytics to collect information about how visitors interact with our marketing site (repscale.ai), including pages viewed, time on site, referral source, and general device/browser information. This data is aggregated and used to improve our product and marketing. Google Analytics may set cookies in your browser. You can opt out using the Google Analytics Opt-out Browser Add-on.

2. Account Authentication and Agent Access

In addition to signing in directly through the web app, you can connect agents and other tools to your account in two ways. Both are optional and revocable.

API keys

You can generate long-lived API keys from your Settings page for use by backend integrations or scripts. We store only a SHA-256 hash of the key plus the first ten characters for identification. The plaintext is shown to you exactly once at creation. Keys inherit your current plan; revoking a key takes effect immediately.

OAuth 2.0 connections (MCP server)

RepScale runs a Model Context Protocol (MCP) server that lets agents like Claude Desktop and other MCP clients connect to your account through OAuth 2.0. When an agent authorizes:

• →The agent registers itself dynamically; we record its name, redirect URLs, and the time it was authorized
• →You see a consent screen showing which agent is asking and what scope it wants. Authorization only happens after you click Approve
• →Access tokens last one hour, refresh tokens rotate on every use. Both are stored only as SHA-256 hashes
• →Each agent's actions count against your daily quota the same as web app actions
• →You can review and disconnect any authorized agent any time from Settings → Connected Agents

What an agent sees

An authorized agent can call the same research, writing, and prep tools you use in the web app. It does not get access to your billing details, your plan settings, or any account configuration beyond what those tools return. Anything the agent generates is still subject to the same data flow described in Section 1: input data is sent to Anthropic and Perplexity to produce output, and the result is stored in your account.

3. How We Use Your Information

• ✓To create and manage your account
• ✓To deliver RepScale features: account research, email writing, and meeting prep
• ✓To process payments and manage your subscription through Stripe
• ✓To send transactional emails (account creation, password resets, billing receipts). We do not send marketing emails without your consent
• ✓To improve the product based on aggregated, anonymized usage patterns
• ✓To respond to support requests or direct communications
• ✓To detect fraud, abuse, or violations of our Terms of Service

We do not sell your personal information. We do not use your data to train AI models.

4. Third-Party Services

RepScale is built on several third-party services. Each receives only the data necessary to perform its function.

5. Data Security

We take reasonable technical and organizational measures to protect your data. These include:

• ✓All data in transit is encrypted via HTTPS/TLS
• ✓Passwords are never stored by RepScale. Authentication is delegated to Clerk
• ✓Database access is restricted via IP allowlisting to Vercel's infrastructure
• ✓API keys and environment variables are stored in Vercel's encrypted environment, not in your codebase
• ✓Payment data is handled entirely by Stripe and never touches our servers

No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify affected users in a timely manner in accordance with applicable law.

6. Data Retention

We retain your account data and user-generated content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing records for tax purposes). Aggregated, anonymized usage data may be retained indefinitely.

7. Your Rights

You have the right to:

• →Access the personal data we hold about you
• →Correct inaccurate data
• →Request deletion of your account and associated data
• →Export your data (we will provide a copy in a machine-readable format upon request)
• →Opt out of Google Analytics tracking via the browser add-on linked above

To exercise any of these rights, email us at info@repscale.ai. We will respond within 30 days.

8. Cookies

RepScale uses cookies for authentication (managed by Clerk) and analytics (Google Analytics). We do not use advertising cookies or sell data to ad networks. You can control cookies through your browser settings, though disabling authentication cookies will prevent you from staying logged in.

9. Children's Privacy

RepScale is a professional B2B tool intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice in the app before the changes take effect. Continued use of RepScale after the effective date constitutes acceptance of the updated policy.

11. Contact

Questions about this policy or your data? Email us at info@repscale.ai.

RepScale · Metro Atlanta, GA · United States