Privacy Policy

Last updated: December 2025

1. Introduction

We at Repysis value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, and use personal information when you use our services and website (https://repysis.com).

2. Data Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Repysis (a project by Raufi Communications (Inh. Monib Raufi))
Vom-Stein-Straße 1a, 45894 Gelsenkirchen, Deutschland
E-mail: info@repysis.com

3. Data We Collect

Account and login data (name, email address, password, preferences)
Payment information (via Stripe Payments)
Analytical and usage data (via Google Analytics / Site Kit)
Reputation analysis data processed via OpenAI API (e.g., review texts for response generation)
Reputation analysis data processed via Google Custom Search API (e.g., search queries related to your business)
Communication data via secure SMTP email

4. Purpose and Legal Basis

We process your data in accordance with Art. 6 (1) GDPR:
• (a) Consent — when you accept analytics or cookies.
• (b) Contract — when you create an account or subscribe to a service.
• (f) Legitimate interest — for fraud prevention, product improvement, and website security.

5. Third Parties & Data Transfers

We use external service providers who may process personal data on our behalf. We have concluded the necessary data processing agreements (Art. 28 GDPR) with all providers where required.

Stripe Payments Europe, Ltd. – Payment processing. Data transfer to the US is based on the EU-US Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs).
Google Ireland Ltd. – Analytics via Site Kit plugin (IP anonymization enabled). Data transfer to the US is based on the EU-US DPF or SCCs.
OpenAI, Inc. (USA) – AI-powered response generation. We transmit review texts to the OpenAI API (gpt-4o-mini) for processing. Data transfer to the US is based on the EU-US DPF or SCCs. We ensure that no sensitive personal data is transmitted.
Google LLC (USA) – Crisis monitoring via Custom Search API. We transmit search queries (which may contain business names or related terms) to Google. Data transfer to the US is based on the EU-US DPF or SCCs.
Hosting provider – Secure data storage on EU-based servers.

6. Data Processing on Behalf of Our Customers (Art. 28 GDPR)

When our customers use Repysis to monitor and analyze reputation data (e.g., reviews, search results) that contain personal data of third parties (e.g., reviewers, employees), Repysis acts as a **Data Processor** (Auftragsverarbeiter) on behalf of the customer. In this case, the customer is the Data Controller. We offer a separate Data Processing Agreement (DPA) that must be concluded with all B2B customers to comply with Art. 28 GDPR.

7. Cookies

We use essential and optional cookies. You may withdraw consent anytime via the cookie banner or browser settings.

8. Data Retention

Personal data is stored only as long as necessary for the stated purposes or as required by law.

9. Your Rights (GDPR)

Access to stored data (Art. 15 GDPR)
Correction, deletion, or restriction (Art. 16–18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)

10. Contact for Privacy Inquiries

If you have any questions about data protection, please contact us:
info@repysis.com or Tel. +49 157 55120629

DSGVO-Hinweis (German Section)

Verantwortlicher im Sinne der DSGVO ist Raufi Communications (Inh. Monib Raufi), vertreten durch Inhaber Monib Raufi. Es gelten die Rechte auf Auskunft, Berichtigung, Löschung und Widerspruch nach Art. 15–21 DSGVO. Für die Verarbeitung von Daten im Rahmen der Auftragsverarbeitung (Art. 28 DSGVO) ist der jeweilige Kunde (Auftraggeber) verantwortlich.