Legal
Privacy Policy
Last updated: 28 July 2026
1. Who We Are
This Privacy Policy explains how Killua Pte. Ltd., operating RepFalcon ("RepFalcon", "we", "us", or "our"), collects, uses, discloses, and protects personal data in connection with our website and platform.
Contact: support@repfalcon.com
Address: 68 Circular Road, #02-01, 049422 Singapore
We process personal data in accordance with applicable Singapore law, including the Personal Data Protection Act 2012 ("PDPA"), and other laws that may apply to you depending on where you are located.
2. Scope
This Policy covers visitors to our marketing site, access applicants, account holders, and authorized users of connected Google Business Profiles. It does not control how Google or other third parties handle data on their own platforms.
3. Data We Collect
Information you provide
- Access / membership applications: name, business name, email, phone, Google Business Profile URL, rating estimates, review volume, and crisis-related answers;
- Account credentials and profile details when you register or log in;
- Support communications, billing details, and correspondence;
- Content you submit for appeals, replies, escalations, or feedback.
Google Business Profile & review data
- Location and profile metadata you authorize us to access;
- Review text, ratings, reviewer display names or identifiers made available via APIs or authorized channels, timestamps, and related status fields;
- AI analysis outputs, appeal drafts, reply drafts, and escalation records linked to those reviews.
Automatically collected data
- Device, browser, IP address, approximate location, pages viewed, and usage logs;
- Cookies or similar technologies for session security, preferences, and analytics where enabled.
4. How We Use Data
We use personal and business data to:
- Evaluate invite requests and operate the invite-only membership program;
- Provide monitoring, AI analysis, appeal drafting, auto-reply features, QR tools, and related Services;
- Escalate cases to human operators (including RepErase-affiliated teams) when you request or authorize it;
- Process payments, prevent fraud, and manage subscriptions;
- Communicate about access decisions, product updates, security notices, and support;
- Improve models, workflows, and product quality using de-identified or aggregated insights where practicable;
- Comply with law, enforce Terms, and protect our rights.
5. Legal Bases / Consent
Depending on applicable law, we rely on one or more of: your consent (including when you submit forms or connect accounts); performance of a contract to provide the Services; our legitimate interests in operating a secure B2B platform and improving products (balanced against your rights); and legal obligations.
Where Google or other APIs require specific authorizations, we process connected data only within the scopes you grant and for stated purposes.
6. Sharing & Disclosure
We may share data with:
- Service providers (hosting, databases, email, payments such as Stripe, analytics, AI infrastructure) under contractual confidentiality and security obligations;
- RepErase / human escalation operators when you escalate a case or when needed to fulfill a paid manual engagement;
- Platform counterparts such as Google when submitting appeals or responses you authorize;
- Professional advisers and authorities where required by law, legal process, or to protect rights, safety, and integrity of the Services;
- Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
We do not sell personal data for third-party marketing lists.
7. International Transfers
We are based in Singapore and may process data in other countries where our providers operate. Where required, we use appropriate safeguards (such as contractual protections) for cross-border transfers.
8. Retention
We retain data only as long as needed for the purposes above, including to maintain accounts, document appeals/escalations, meet legal and accounting requirements, and resolve disputes. Access-request records may be kept to manage invite decisions and prevent abuse. When data is no longer required, we delete or anonymize it where reasonably practicable.
9. Security
We implement reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure; you use the Services at your own risk to that extent.
You are responsible for safeguarding login credentials and limiting access to authorized staff only.
10. Cookies & Similar Technologies
We may use essential cookies for authentication and security, and optional analytics cookies to understand site usage. You can control cookies through your browser settings; disabling some cookies may affect site functionality.
11. Your Rights
Subject to applicable law (including the PDPA), you may request access to, correction of, or withdrawal of consent for your personal data, and in some cases deletion or restriction of processing. To exercise rights, email support@repfalcon.com. We may need to verify your identity and may retain certain data where legally required or permitted (for example, for fraud prevention or contract records).
If you are in a jurisdiction with additional rights (such as access, portability, or objection), we will honor those rights to the extent they apply to our processing.
12. Children
The Services are directed to businesses and adults. We do not knowingly collect personal data from children under 16. If you believe we have, contact us and we will take appropriate steps.
13. Third-Party Links & Platforms
Our site may link to RepErase.com, Google, or other services. Their privacy practices are governed by their own policies. Connecting a Google account is also subject to Google's terms and privacy disclosures.
14. Automated Processing & AI
We use automated systems and AI to analyze reviews, draft appeals, and suggest replies. These tools assist human workflows and do not constitute legal advice. Important decisions about submitting content to Google remain your responsibility unless a human escalation engagement expressly assumes defined actions.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date will change when we do. Material changes may also be communicated by email or in-product notice. Continued use after changes take effect means you acknowledge the updated Policy.
16. Contact & Complaints
For privacy questions or requests, contact support@repfalcon.com. You may also have the right to lodge a complaint with the Personal Data Protection Commission (Singapore) or another competent authority where you live or work.
Questions? Email support@repfalcon.com.