Privacy Policy

Effective Date: June 11, 2026
Company: Repflow
Website: https://www.userepflow.com
Contact: henry+privacy@userepflow.com


Repflow helps creators manage sponsorship opportunities, inbound brand messages, deal workflows, analytics, and related business operations. This Privacy Policy explains what information we collect, how we use it, what third-party services may process it, and the choices you have.

By using Repflow, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect information that you provide directly, information generated through your use of Repflow, and information processed by third-party services integrated into the app.

Account and Profile Information

We may collect:

  • Name

  • Email address

  • Phone number

  • Creator name, business name, or company name

  • Profile photo or avatar

  • Login credentials or authentication identifiers

  • Account settings and preferences

  • Billing account details

  • Communication preferences

Creator, Sponsorship, and Business Information

Repflow may collect information related to your creator business, sponsorship activity, and deal management, including:

  • Brand, agency, and contact information

  • Sponsorship inquiries

  • Deal terms, pricing, deliverables, deadlines, campaign details, and proposal information

  • Creator preferences, minimum rates, category preferences, and auto-rejection rules

  • Notes, tasks, labels, statuses, and workflow activity

  • Files, documents, screenshots, media, or other uploaded content

  • Referral, portfolio, or creator profile information

  • Revenue, offer, and sponsorship analytics entered into or generated by the app

Messages, Emails, and Communications

If you connect an inbox, forward emails, use a Repflow-managed email address, or use messaging features, we may collect and process:

  • Email sender and recipient information

  • Subject lines

  • Email body content

  • Attachments

  • Message threads

  • Brand and agency replies

  • Automated responses and drafts

  • Support communications with Repflow

Repflow may use this information to classify opportunities, qualify inbound leads, draft replies, create offers, update deal statuses, and help manage sponsorship workflows.

Payment and Billing Information

Payments may be processed by Stripe or another payment provider. We may collect or receive limited billing information, including:

  • Subscription plan

  • Payment status

  • Invoice history

  • Billing email

  • Last four digits of a payment card

  • Card brand

  • Billing address, if provided

  • Tax or compliance information, if required

Repflow does not intentionally store full credit card numbers. Full payment details are handled by our payment processor.

Device, Usage, and Analytics Data

We may collect information about how you access and use Repflow, including:

  • Device type

  • Operating system

  • Browser type

  • App version

  • IP address

  • Device identifiers

  • Session activity

  • Pages, screens, or features viewed

  • Buttons clicked

  • Referring URLs

  • Time spent in the app

  • Search, filter, and workflow activity

  • Subscription, conversion, and product usage events

Crash Logs, Diagnostics, and Performance Data

We may collect technical information to monitor app reliability and improve performance, including:

  • Crash reports

  • Error logs

  • Stack traces

  • Diagnostic data

  • Performance data

  • Server logs

  • Device and app configuration details

Location Information

We may collect approximate location information, such as location derived from your IP address, to help with security, analytics, fraud prevention, localization, or service improvement.

If Repflow requests access to precise location data, we will do so only with your device-level permission. You can disable location permissions in your device settings.

Support and Feedback Information

If you contact us for support, provide feedback, or participate in onboarding, we may collect:

  • Your name and contact information

  • Support messages

  • Screenshots, recordings, or files you provide

  • Product feedback

  • Call notes

  • Troubleshooting information

2. How We Use Information

We use the information we collect to:

  • Create and manage user accounts

  • Provide and operate Repflow

  • Process sponsorship inquiries and brand messages

  • Classify, qualify, organize, and track inbound opportunities

  • Generate drafts, proposals, summaries, and workflow recommendations

  • Manage creator preferences and deal rules

  • Provide analytics and reporting

  • Process payments and manage subscriptions

  • Send transactional emails, notifications, and product updates

  • Provide customer support

  • Improve product functionality and user experience

  • Monitor app performance and fix bugs

  • Detect, prevent, and investigate fraud, abuse, security incidents, or unauthorized access

  • Comply with legal, tax, accounting, and regulatory obligations

  • Enforce our terms and policies

3. Third-Party Services and SDKs

Repflow may use third-party services, SDKs, infrastructure providers, and subprocessors to operate the app. These third parties may collect or process data as part of providing their services.

Depending on the version of the app and features you use, these may include:

Infrastructure, Database, and Hosting

  • Supabase

  • Firebase

  • Vercel, Netlify, AWS, Google Cloud, Cloudflare, or other hosting and infrastructure providers

These services may process account data, authentication data, app data, uploaded content, server logs, device data, IP addresses, and diagnostic information.

Payments

  • Stripe

Stripe may process payment details, billing information, subscription data, transaction history, fraud prevention signals, and related compliance information.

AI and Automation

  • OpenAI

  • Other AI model, automation, or workflow providers used by Repflow

These services may process prompts, messages, emails, sponsorship details, creator preferences, uploaded content, deal information, and generated outputs in order to provide AI-powered features.

Analytics and Product Measurement

  • Firebase Analytics

  • Google Analytics

  • PostHog

  • Mixpanel

  • Amplitude

  • Other analytics tools used by Repflow

These tools may process usage data, device data, event data, IP address, session activity, product interactions, and conversion events.

Error Logging and Diagnostics

  • Firebase Crashlytics

  • Sentry

  • LogRocket

  • Other error logging or observability tools used by Repflow

These tools may process crash logs, diagnostics, device data, app version, operating system, IP address, and user interaction data related to debugging.

Authentication

  • Firebase Authentication

  • Supabase Auth

  • Google Sign-In

  • Apple Sign-In

  • Other authentication providers used by Repflow

These services may process login identifiers, email addresses, authentication tokens, account IDs, and related security data.

Email and Messaging

  • Gmail APIs

  • Google Workspace

  • SendGrid

  • Resend

  • Postmark

  • Mailgun

  • Other email or messaging services used by Repflow

These services may process email addresses, message content, subject lines, attachments, delivery data, and communication metadata.

Push Notifications

  • Apple Push Notification service

  • Firebase Cloud Messaging

  • OneSignal or other notification providers used by Repflow

These services may process device tokens, notification settings, message delivery data, and device information.

File Storage

  • Supabase Storage

  • Firebase Storage

  • AWS S3

  • Cloudflare R2

  • Other storage providers used by Repflow

These services may process uploaded content, attachments, media files, documents, and related metadata.

Customer Support and CRM

  • Intercom

  • HubSpot

  • Attio

  • Notion

  • Airtable

  • Slack

  • Other support, CRM, or internal operations tools used by Repflow

These services may process account information, support messages, product usage notes, onboarding information, and customer relationship data.

Before submitting Repflow to the App Store, this section should be reviewed and updated so it exactly matches the third-party services, SDKs, APIs, and code actually used in the app.

4. AI and Data Processing

Repflow may use AI systems to help users manage sponsorship workflows. AI-powered features may include:

  • Reading or classifying inbound sponsorship emails

  • Identifying potential brand opportunities

  • Extracting brand names, agency names, deliverables, budgets, timelines, and contact details

  • Drafting email responses

  • Summarizing messages or deal activity

  • Applying creator preferences to inbound offers

  • Generating proposals, recommendations, or workflow suggestions

  • Auto-rejecting or flagging opportunities based on user-defined rules

To provide these features, Repflow may send relevant user content, messages, emails, preferences, and deal information to AI service providers such as OpenAI or other model providers.

AI-generated outputs may be inaccurate or incomplete. Users should review important AI-generated responses, proposals, classifications, and decisions before relying on them.

Repflow does not intend to use private user emails, messages, uploaded content, or sponsorship data to train general-purpose AI models unless we clearly disclose that practice and obtain any required permission.

5. How We Share Information

We may share information with:

  • Service providers and subprocessors that help us operate Repflow

  • Payment processors for billing and subscription management

  • AI providers to deliver AI-powered features

  • Analytics and diagnostics providers to improve and secure the app

  • Email, hosting, authentication, and notification providers

  • Professional advisors, such as legal, tax, accounting, or security advisors

  • Law enforcement, regulators, courts, or other parties when required by law

  • Another company in connection with a merger, acquisition, financing, reorganization, or sale of assets

We do not sell personal information in the traditional sense.

We do not knowingly share personal information for cross-context behavioral advertising unless specifically disclosed and, where required, consented to.

6. App Store Privacy Disclosure Alignment

Repflow’s App Store privacy disclosures should reflect the data collected by Repflow and its third-party partners.

Depending on the final app implementation, Repflow may collect data categories that Apple classifies as:

  • Contact Info, such as name, email address, and phone number

  • User Content, such as emails, messages, attachments, uploaded files, and creator-provided content

  • Identifiers, such as user ID, account ID, device ID, or authentication identifiers

  • Purchases, such as subscription and billing history

  • Usage Data, such as product interaction and feature usage

  • Diagnostics, such as crash logs and performance data

  • Location, such as approximate location derived from IP address or precise location if enabled

  • Financial Info, if billing, tax, or payment-related details are collected or processed

  • Other Data, if Repflow collects data that does not fit another category

Some data may be linked to your identity, depending on how it is stored and used. Some diagnostics or aggregated analytics may not be linked to your identity.

Before submitting to the App Store, Repflow should compare this Privacy Policy line-by-line against the App Store Connect privacy answers to make sure both are consistent.

7. Data Retention

We keep personal information for as long as reasonably necessary to provide Repflow, operate our business, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.

Retention periods may vary depending on the type of data, the purpose for collection, and legal or operational requirements.

For example:

  • Account data may be retained while your account is active.

  • Sponsorship, message, and workflow data may be retained while you use Repflow or until you delete it.

  • Billing and transaction records may be retained as required for tax, accounting, fraud prevention, and legal compliance.

  • Logs, analytics, and diagnostics may be retained for a limited period unless needed for security, debugging, or legal reasons.

  • Backups may persist for a limited period after deletion before being overwritten or securely removed.

8. User Rights and Choices

Depending on where you live, you may have rights to:

  • Access the personal information we hold about you

  • Correct inaccurate information

  • Delete your personal information

  • Export or receive a copy of your data

  • Object to or restrict certain processing

  • Withdraw consent where processing is based on consent

  • Opt out of certain analytics, marketing, or tracking practices where applicable

You can manage some information directly in the app. You may also contact us at henry+privacy@userepflow.com to request access, correction, deletion, or account closure.

We may need to verify your identity before completing certain requests.

9. Account and Data Deletion

You may request deletion of your account and associated personal information by contacting us at henry+privacy@userepflow.com or through any in-app deletion option we provide.

After receiving a deletion request, we will delete or de-identify personal information unless we need to retain certain information for legal, tax, accounting, security, fraud prevention, dispute resolution, or legitimate business purposes.

Deletion of your Repflow account may not automatically delete information held by third-party services if that information must be retained for legal, compliance, billing, or security reasons.

10. Marketing Communications

We may send you service-related messages, such as account, billing, security, support, and product update communications.

We may also send marketing communications if permitted by law. You can opt out of marketing emails by using the unsubscribe link in those emails or contacting us. Even if you opt out of marketing communications, we may still send transactional or service-related messages.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your information.

You are responsible for keeping your login credentials secure and for limiting access to your devices and connected accounts.

12. International Data Transfers

Repflow and its service providers may process and store information in the United States and other countries. These countries may have data protection laws that differ from those in your location.

Where required, we use appropriate safeguards for international transfers of personal information.

13. Children’s Privacy

Repflow is not intended for children under 13 years old, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to Repflow, contact us at henry+privacy@userepflow.com and we will take appropriate steps to delete the information.

If a higher age threshold applies in your location, we will comply with applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, in-app notice, or by updating the effective date above.

Your continued use of Repflow after an updated Privacy Policy becomes effective means you accept the updated policy.

15. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or Repflow’s privacy practices, contact us at:

Repflow
Website: https://www.userepflow.com
Email: henry+privacy@userepflow.com