1. Introduction

This Privacy Policy explains how Autodeus Technologies Private Limited (“Reepl”, “we”, “us”, or “our”), the operator of reepl.io and app.reepl.io, collects, uses, discloses, and protects personal data when you use our services.

We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), and all other applicable data protection legislation.

If you have any questions about this policy or our privacy practices, please contact us at the details in Section 14.

2. Who We Are

For the purposes of applicable data protection law, the data controller is:

Corporate Identity Number (CIN): U72900GJ2017PTC098295
Email: privacy@reepl.io

3. Data We Collect

We collect and process the following categories of personal data:

3.1 Account Data

When you create an account or sign in, we collect:

• Full name and email address
• Profile photograph (where provided)
• Password credentials (stored in encrypted form; we never have access to your plaintext password)
• Account preferences and language settings
• Date of account creation and last login timestamp

3.2 LinkedIn and Social Media Data

When you connect a LinkedIn account or other social media platform to Reepl, we collect and process the data you expressly authorise us to access via those platforms’ official APIs, which may include:

• Your public profile information (name, headline, profile image, job title)
• Content you have published, such as posts and articles
• Engagement activity you choose to import (such as comments or reactions), where enabled by you in your privacy settings
• Account identifiers required to authenticate your connection

We only access the specific permissions you grant. You can revoke this access at any time by disconnecting the integration from within Reepl or directly through the respective platform.

3.3 Content Data

Data you create or upload while using Reepl, including:

• Post drafts, templates, and scheduled content
• Carousel designs and media assets
• Comments, notes, and content ideas
• Brand kit settings and voice profile configurations

3.4 Contact and CRM Data

When you use Reepl’s contact management features, we store information about the professional contacts you choose to add, which may include:

• Names, job titles, and employer information
• Notes and tags you apply to contacts
• Interaction history you record within the platform

This data is provided entirely by you. Reepl does not independently source or enrich contact records.

3.5 Subscription and Billing Data

When you purchase a subscription, we collect:

• Subscription plan and billing cycle
• Payment status and transaction identifiers

We do not store full payment card details. Card processing is handled by our third-party payment processor, which is responsible for the security of your payment information under its own privacy policy and applicable PCI DSS obligations.

3.6 Usage and Technical Data

We collect technical data about how you interact with our services, including:

• IP address and approximate geographic location (country/region level)
• Browser type, version, and operating system
• Pages visited, features used, and actions taken within the application
• Session duration and usage frequency
• Error logs and performance data

3.7 Cookie and Tracking Data

We use cookies and similar technologies as described in Section 10 below.

3.8 Support and Communications Data

When you contact us for support or otherwise communicate with us, we retain records of that correspondence, including your contact details and the content of your messages.

4. How We Use Your Data

We use personal data for the following purposes, each grounded in a lawful basis under Article 6 GDPR:

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and interests. You may object to processing based on legitimate interests at any time (see Section 9).

Where we rely on consent (for example, for analytics cookies and session recording), you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. You can manage your consent preferences in Settings > Data and Privacy within the app, or via our cookie consent banner.

5. Sharing Your Data

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

5.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process data strictly on our behalf and under our instructions, under written data processing agreements. These include providers of:

• Cloud infrastructure and hosting services
• Authentication and identity management
• Payment processing
• Transactional and marketing email delivery
• Analytics and session recording (subject to your consent)
• Artificial intelligence and language model services (for AI-assisted features)
• Customer support tooling

We maintain an up-to-date list of our sub-processors. If you would like to request this list, please contact us at the address in Section 14.

5.2 Social Media Platforms

Where you connect a third-party platform (such as LinkedIn or X/Twitter), data is transmitted to and from that platform in accordance with the permissions you have granted and the platform’s own terms and privacy policy.

5.3 Legal and Regulatory Disclosure

We may disclose personal data if required to do so by law, court order, or at the request of a competent regulatory authority, or where we reasonably believe such disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of our assets, personal data may be transferred to the acquirer, subject to the same protections described in this policy.

6. International Data Transfers

Our primary infrastructure is located within the European Economic Area (EEA). Where we engage service providers established outside the EEA — including in the United States — we rely on one or more of the following transfer mechanisms to ensure an adequate level of protection:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules where applicable

If you would like further information about the specific safeguards in place for any particular transfer, please contact us.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

When you request deletion of your account, we initiate a soft deletion immediately and complete permanent deletion of your personal data within 30 days of the request, subject to any legal hold obligations. Once permanently deleted, your data cannot be recovered.

8. Account Deletion and the Right to Erasure

You may delete your account at any time from Settings > Account > Delete Account.

Please be aware that upon submitting a deletion request:

• Your account will be immediately deactivated. You will not be able to log back in once the request is submitted.
• You will not be able to create a new account using the same email address. This restriction exists to protect the integrity of our free trial programme.
• All personal data will be permanently deleted within 30 days of your request.
• If you have an active paid subscription, it will be cancelled at the end of the current billing period. You will retain access to paid features until the period ends.

If you believe your deletion request was submitted in error, please contact our support team as soon as possible. Recovery may be possible during the initial period before permanent deletion is executed.

9. Your Rights Under GDPR

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data:

• Right of access (Article 15)— You may request a copy of the personal data we hold about you and information about how we use it.
• Right to rectification (Article 16)— You may request that we correct any inaccurate or incomplete personal data we hold about you. Most account data can be updated directly within the app.
• Right to erasure (Article 17)— You may request the deletion of your personal data where there is no compelling reason for us to continue processing it. You can exercise this right directly through the account deletion feature described in Section 8, or by contacting us.
• Right to restriction of processing (Article 18)— You may request that we restrict processing of your personal data in certain circumstances, for example while you contest its accuracy.
• Right to data portability (Article 20)— You may request that we provide your personal data in a structured, commonly used, machine-readable format, or transmit it to another controller where technically feasible.
• Right to object (Article 21)— You may object at any time to processing of your personal data based on legitimate interests, including profiling. You may also object to processing for direct marketing purposes at any time.
• Right to withdraw consent (Article 7(3))— Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Rights related to automated decision-making (Article 22)— We do not make solely automated decisions that produce legal or similarly significant effects on you. AI-assisted features generate suggestions only; all publishing and content decisions remain with you.

To exercise any of these rights, please contact us at the address in Section 14. We will respond within one calendar month of receiving a verifiable request. In complex cases, we may extend this period by a further two months and will inform you accordingly.

We may need to verify your identity before processing a request. We will not charge a fee for reasonable requests.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

• Strictly necessary cookies— Required for the platform to function. These include session authentication tokens and security cookies. These cannot be declined.
• Analytics and performance cookies— Help us understand how users interact with the service, which features are most used, and where improvements are needed. These include session recording tools. These are only activated with your consent.

You can manage your cookie preferences through the cookie consent banner displayed on your first visit to the platform, or at any time via Settings > Data and Privacy in the app.

For information on how to control cookies at the browser level, please refer to your browser’s help documentation.

11. Children’s Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

12. Security

We implement technical and organisational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encryption of data in transit and at rest, access controls, and regular security reviews.

No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, affected individuals without undue delay.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last updated” date at the top of this page and notify you by email or through a prominent in-app notification.

Your continued use of Reepl after the effective date of an updated policy constitutes acceptance of the revised terms.

14. Contact Us and Complaints

Data protection enquiries and rights requests:
Email: privacy@reepl.io

Postal address:

We aim to respond to all requests within 30 days.

Complaints:
If you are not satisfied with how we handle your personal data or respond to your request, you have the right to lodge a complaint with your local data protection supervisory authority. In the European Union, you may find your national authority at edpb.europa.eu. In the United Kingdom, the relevant authority is the Information Commissioner’s Office (ICO) at ico.org.uk.

This policy was prepared in accordance with the requirements of Regulation (EU) 2016/679 (GDPR) and the UK GDPR.