ReputeLift Privacy Policy

Effective date: 2026-06-02

Last updated: 2026-06-02

1. Introduction & Scope

This Privacy Policy explains how Martello Systems LLC ("Martello Systems," "we," "us," or "our") collects, uses, shares, and protects personal information when you use ReputeLift at reputelift.com and related applications and services (the "Service"). It applies to information we process about visitors and account holders (the businesses that use the Service).

This Policy also explains how we handle the customer contact data that you, our business users, upload or import so the Service can send review requests on your behalf. For that data, you are the controller and you remain responsible for having a lawful basis and any required consent; we act as your processor and handle it under your instructions and this Policy.

By using the Service, you agree to the practices described in this Policy. This Policy is incorporated into and subject to our Terms of Service. If you do not agree with this Policy, please do not use the Service.

2. Information We Collect

Account information. When you register, we collect information such as your name, email address, password (stored in hashed form), and business details you provide.
Your customers' contact data (you provide). To send review requests, you upload or enter your customers' contact information — such as names, email addresses, and mobile phone numbers — along with related notes and request/send history. You are responsible for having a lawful basis and any required consent to provide and message this data.
Review and reputation data. We retrieve and store reviews, ratings, responses, and related metrics from the platforms you connect (such as Google Business Profile and Facebook/Meta).
Phone numbers and messaging data. We process mobile phone numbers (yours and your customers') and messaging metadata — including delivery status, opt-out/STOP status, and timestamps — to send messages and honor opt-outs.
Payment information (via Stripe). Subscription payments are processed by Stripe, Inc. We do not collect or store your full payment card numbers. Stripe processes your payment details directly; we receive limited information such as a transaction identifier, the last four digits and card brand, subscription status, and billing metadata.
Usage, device, and log data. We automatically collect information such as IP address, browser and device type, pages and features used, referring URLs, timestamps, and diagnostic/log data.
Cookies and similar technologies. We use strictly necessary cookies to keep you signed in and secure your session, and — only if you accept our cookie banner — optional analytics cookies (Google Analytics 4) to understand how the site is used, as described in Section 6.
Communications. If you contact us (for example, at support@reputelift.com), we collect the content of your messages and our correspondence.

We do not intentionally collect sensitive categories of personal information, and we ask that you not submit them.

3. How We Use Information

We use personal information to: provide, operate, and maintain the Service and your account; send review-request and follow-up messages by email and SMS on your behalf and at your direction; retrieve, display, and analyze reviews and ratings from connected platforms; generate optional AI-assisted draft responses (using our AI provider) for your approval; process subscriptions, billing, and payments through Stripe; send transactional and account communications and any digests you enable; provide customer support; monitor, secure, debug, and improve the Service; detect and prevent fraud, abuse, and security issues; honor opt-out and suppression requests; and comply with legal obligations and enforce our agreements. We do not sell your personal information, and we do not use customer contact data you upload for our own marketing.

4. Legal Bases for Processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal information on the bases of: performance of a contract (to provide the Service and process your subscription); legitimate interests (to secure, improve, and analyze the Service and prevent fraud, balanced against your rights); consent (for optional communications and certain cookies, which you may withdraw at any time); and legal obligation (to comply with applicable laws, including tax and recordkeeping requirements). For the customer contact data you upload, you are responsible for establishing the lawful basis for processing and messaging.

5. How We Share Information

We share personal information only as described below. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Service providers (processors). Stripe, Inc. (payment processing and subscription billing); Brevo (transactional and review-request email delivery); Twilio (SMS/text message delivery); Anthropic (optional AI-assisted draft responses); and hosting and infrastructure providers that operate the Service.
Review platforms / integrations. When you connect a platform (such as Google Business Profile or Facebook/Meta), we exchange data with that platform to retrieve reviews, post responses you approve, and direct your customers to leave reviews. Your use of those platforms is governed by their own terms and privacy policies.
Legal and safety. We may disclose information if required by law or legal process, or to protect the rights, property, or safety of Martello Systems, our users, or others, or to enforce our Terms.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.
With your direction. We share information when you ask us to or otherwise consent.

6. Cookies & Sessions

We use essential cookies to keep you logged in, secure your session, and remember your preferences; these are always active because the Service cannot function without them. We also use optional analytics cookies through Google Analytics 4 to understand how the site is used and improve it. These analytics cookies load only after you accept our cookie consent banner — if you decline, or have not yet chosen, no analytics cookies are set and no analytics run. We do not use advertising cookies and do not track you across other websites for advertising. You can change your choice by clearing the consent stored in your browser, and you can control cookies through your browser settings; disabling some cookies may affect functionality.

7. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to comply with legal, tax, accounting, and recordkeeping obligations, resolve disputes, and enforce our agreements. We retain opt-out and suppression records as needed to honor those requests. When information is no longer needed, we delete or anonymize it. You may request deletion as described in Section 9; certain records (such as billing records) may be retained where required by law.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, hashed passwords, access controls, and reputable infrastructure and payment providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential. If we become aware of a breach affecting your personal information, we will notify you and authorities as required by law.

9. Your Privacy Rights

Depending on where you live, you may have rights to: access a copy of the personal information we hold; correct inaccurate information; delete your personal information; port/export your data; object to or restrict certain processing; withdraw consent where processing is based on consent; and non-discrimination for exercising your rights.

California residents (CCPA/CPRA). You have rights to know, access, correct, and delete personal information, and to opt out of any "sale" or "sharing" — note that we do not sell or share personal information as those terms are defined.

EEA/UK residents (GDPR/UK GDPR). You have the rights listed above and the right to lodge a complaint with your local data protection authority.

For the customer contact data you upload to the Service, you are responsible for honoring the privacy rights of those individuals; we will assist you as your processor where reasonably required. To exercise any right regarding your own information, email support@reputelift.com. We will verify your request and respond within the timeframes required by applicable law.

10. SMS / Phone Data Handling & Opt-Out

We process mobile phone numbers (yours and the customers you choose to contact) solely to send the messages you have authorized and to maintain delivery, consent, and opt-out records. We do not sell or share phone numbers, and mobile opt-in/opt-out data is not shared with third parties for their marketing purposes. We share numbers with our SMS provider (Twilio) only to deliver messages.

Outbound SMS include opt-out language ("Reply STOP to opt out"). When a recipient replies STOP, UNSUBSCRIBE, CANCEL, QUIT, or END, the Service marks that number as opted out and suppresses further SMS to it; replying START or YES resubscribes. Recipients may reply HELP for help. Message and data rates may apply. As the business user, you remain responsible for obtaining consent before messaging your customers (see the Terms of Service) and for honoring opt-outs you receive by any channel. Opting out of SMS does not stop essential email communications about an account.

11. Email / CAN-SPAM Handling

Review-request and notification emails sent through the Service include sender identification and an unsubscribe mechanism. As the business user, you are responsible for ensuring your email content and sending practices comply with the CAN-SPAM Act and other applicable laws, including honoring unsubscribe requests promptly. We honor unsubscribe and suppression signals to help you comply.

12. Children's Privacy

The Service is intended for business use by users who are at least 18 years old and is not directed to children. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact support@reputelift.com.

13. International Users

We operate in the United States, and the Service is intended primarily for U.S.-based businesses. If you access the Service from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country. By using the Service, you consent to this transfer and processing, subject to this Policy and applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and may provide additional notice. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

15. Contact

If you have questions or requests regarding this Privacy Policy or your personal information, contact Martello Systems LLC — ReputeLift, at support@reputelift.com (reputelift.com).