Privacy Policy

1. Information We Collect

Vaarep collects information necessary to deliver our reputation management and review automation services:

• Account & Profile Information: Name, email address, password hash, company name, phone number, and billing preferences.
• Customer Data: First name, last name, email address, phone number, and job tags uploaded or entered by your organization to dispatch review requests.
• Google API Data: Google Business Profile ID, place details, and review records obtained via OAuth authentication.
• Messaging & Delivery Logs: Delivery timestamps, dispatch channel (SMS, WhatsApp, Email), and delivery status.

2. How We Use Information

We use collected data strictly to operate, maintain, and secure the Service, including:

• Dispatching automated review invitations over WhatsApp, SMS, or Email as instructed by your workspace.
• Syncing Google Business Profile reviews and enabling AI review reply drafting.
• Processing subscription payments and managing messaging credit balances.
• Enforcing multi-tenant isolation, account security, and audit logging.

3. Third-Party Subprocessors & Data Sharing

We never sell, rent, or trade customer contact lists. Data is shared only with verified technical infrastructure subprocessors necessary to deliver the Service (e.g. Google APIs, Twilio for messaging, Paddle/PayFast/Paystack for payments, OpenAI for AI drafting, and Vercel for hosting). View our full Subprocessors Directory.

4. Data Retention & Security

Data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. We retain account and transaction records for the duration of your active subscription and as required by legal or tax obligations. You can request deletion of your account and customer data anytime by contacting our privacy team.

5. Your Privacy Rights & Contact

You have the right to access, rectify, export, or delete your personal data. For privacy inquiries or data subject access requests, email our Privacy Officer at privacy@vaarep.com.