Reputcon helps businesses understand and protect their reputation. This policy explains what personal information we collect, why, how we keep it safe, and the rights you have over it, in line with UK data protection law. We have written it in plain language, with no hidden surprises.
1Who we are and how to reach us
Reputcon ("Reputcon", "we", "us", "our") provides the Reputcon reputation and business intelligence platform. For the personal data described in this policy, Reputcon is the data controller. We are based in the United Kingdom.
For any privacy question, or to exercise your rights, contact us at contact@reputcon.com.
This policy covers reputcon.com, the Reputcon OS application at app.reputcon.com, and Project Argus at project-argus.reputcon.com. Project Argus is a free public map, and what we collect there is deliberately narrow. It is set out separately in section 2.
2The information we collect
What we hold depends on how you use Reputcon.
- Waitlist. While Reputcon is in pre-launch, the only personal data we collect is the email address you submit to join the waitlist, and the date you submitted it.
- Account details. When the service opens: your name, business name, email, and the login credentials you create.
- Business and reputation data. Information you connect or enter, such as your locations, your Google Business Profile, the reviews and ratings on it, customer feedback captured through Reputcon, competitor information and your team members.
- Connected credentials. API keys and access tokens you provide to connect third-party services. These are always encrypted (see section 8).
- Usage and technical data. Basic information such as device, browser, approximate location derived from IP, and the pages and features you use, to keep the service secure and working.
- Payment data. When you subscribe, payment is handled by our payment processor. We receive confirmation and limited billing details, but never your full card number.
- Communications. Messages you send us, such as support requests.
If you create a founding member account or, from launch, take part in the referral programme, we also hold your name, business name, account email, your founding member status, and your referral relationships (which account introduced which), so we can apply the right discounts when billing begins. Your referral contacts never see your personal details beyond the fact that their referral was successful.
Project Argus. Project Argus is free and has no account. Three things are worth stating plainly:
- Your email. The terminal asks for an email address before it opens, together with a tick box agreeing to occasional email about Reputcon and Project Argus. That address joins the same mailing list as the main site, tagged as having come from Argus. You can unsubscribe from any email we send. If you would rather not join a mailing list, please do not enter an address.
- "Near Me" location. If you press Near Me, your browser asks your permission and then gives the page your approximate position. It is used to move the map and is saved in your own browser so the map opens in the same place next time. It is never sent to us and we never see it. Clearing your browser storage for the site removes it.
- Technical data. Argus fetches its live feeds through a relay on our servers rather than from your browser directly, so our host processes your IP address and browser user agent to serve those requests, as any web server does. We use this to run and protect the service, not to build a profile of you.
- Map tiles. The map imagery itself is loaded by your browser directly from the mapping providers, because that is how map rendering works. Those providers therefore see your IP address and the areas of the map you view, under their own privacy terms. They are credited in the terminal.
Argus runs no analytics, no advertising and no cross-site tracking, and it loads no third-party fonts, scripts or libraries: everything the page itself needs is served from our own domain.
3How we use your information
- To provide, operate, secure and improve the Reputcon OS platform.
- To contact you about the waitlist and, later, your account and the service.
- To analyse your reputation data and generate the insights, alerts and recommended actions that are the core of the product.
- To take payment and keep proper financial records.
- To respond to your questions and provide support.
- To meet our legal, regulatory and accounting obligations.
We do not sell your personal data, and we do not use it for third-party advertising.
4Our lawful bases
Under UK GDPR we rely on the following lawful bases, depending on the purpose:
- Consent, for the waitlist and any marketing emails. You can withdraw consent at any time.
- Performance of a contract, to deliver the service you sign up for and manage your account.
- Legitimate interests, to secure, maintain, analyse and improve the platform and prevent misuse, balanced against your rights and freedoms.
- Legal obligation, where the law requires us to keep or disclose information.
5Automated insights and AI
Reputcon uses automated processing and AI to score reputation threats, detect patterns across your data, and suggest recommended actions and task assignments. These are decision-support tools: they inform you and your team, who stay in control. We do not make decisions that produce legal or similarly significant effects about any individual based solely on automated processing. Where AI features rely on a third-party model provider, only the data needed to produce the result is processed, under contract and not used to train public models.
6Sharing and our service providers
We share data only with the providers that help us run Reputcon, and only as far as needed. Each acts as our processor under contract, protecting your data and using it only for the services they provide to us:
- Hosting and database providers that store the platform's data.
- Email delivery providers that send waitlist and account emails.
- Payment processing providers that take subscription payments.
- AI model providers that power the analysis and recommendation features.
- Google, where you connect your Google Business Profile so Reputcon can read and manage your reviews on your behalf.
We may also disclose information where the law requires it, to protect our rights or safety, or as part of a business sale or reorganisation, in which case your data stays protected by terms at least as strict as these.
7International transfers
Where personal data is processed outside the UK, we make sure it is protected by an appropriate safeguard recognised under UK law, such as an adequacy decision, the UK International Data Transfer Agreement, or the relevant standard contractual clauses, together with any additional measures needed to keep your data secure.
8How we protect your data
Every API key and connection you store is encrypted with AES-256-GCM, an authenticated, tamper-evident standard. The master key is held separately from the database, and every account is isolated from every other. Your credentials stay sealed even in a worst-case breach.
We apply appropriate technical and organisational measures to guard against unauthorised access, loss, alteration or misuse, and we restrict access to personal data to those who need it. No system is ever completely risk-free, but security is built into Reputcon from the ground up rather than added on top. If a breach ever affects your rights, we will notify you and the regulator as the law requires.
9How long we keep your data
We keep waitlist emails until the service launches and you either create an account or ask to be removed. Account and business data is kept for as long as your account is active, and for a limited period afterwards to meet legal, tax and accounting duties, after which it is deleted or anonymised. Backups are cycled out on a rolling basis.
10Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing.
To exercise any of these, email contact@reputcon.com and we will respond within the time the law allows, normally one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to put things right first.
11Cookies
The Reputcon website uses only the cookies it needs to work, and no more. We do not run third-party advertising, and we do not use cross-site tracking cookies. The details you send us, such as your waitlist email, are transmitted securely and stored on our systems as described in section 2, never sold or shared for advertising. If we later add analytics or other non-essential cookies, we will ask for your consent first, as required by the Privacy and Electronic Communications Regulations (PECR).
Project Argus sets no cookies. It does use your browser's local storage to remember that you have entered, and to remember your map position and any layers or watch zones you set up, so the terminal opens where you left it. That information stays in your browser and is not transmitted to us. Clearing site data for project-argus.reputcon.com removes all of it.
12Marketing
We will only send you marketing emails where you have asked us to or otherwise agreed. Every marketing email includes an easy way to unsubscribe, and you can opt out at any time by emailing us. Service messages about your account or important changes are not marketing and may still be sent.
13Children
Reputcon is a tool for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
14Changes to this policy
We may update this policy as Reputcon grows or the law changes. When we make a material change, we will update the date at the top and, where appropriate, tell you directly.
15Contact
Questions about this policy or your data? Email contact@reputcon.com and we will be glad to help.