Privacy Policy
Reputal Solutions. Last updated 9 September 2026.
This Privacy Policy explains how Reputal Solutions ("Reputal Solutions," "we," "us," or "our") collects, uses, stores, and shares information when you use our website (reputalsolutions.com) and our reputation management, staff ranking, and consulting services (the "Service").
1. Who we are
Reputal Solutions
KVK number: 42135688
VAT/BTW number: NL005524164B44
Registered in Amsterdam, the Netherlands
Contact: jens@reputalsolutions.com
2. Information we collect
2.1 Account information
When you sign up, we collect your name, email address, restaurant name, and a securely hashed password. We never store your password in plain text.
2.2 Billing information
Payments are processed by Stripe. We do not store your full card details. Stripe provides us with limited billing information (such as subscription status and payment history) needed to manage your account.
2.3 Google Business Profile data
If you choose to connect your Google Business Profile, we access this data through our processor, Zernio, using Google's official APIs. This may include:
- Your business listing information
- Reviews left by your customers, including the reviewer's name and review text as made available through the Google Business Profile API
- The ability to publish replies to reviews on your behalf, only when you approve a reply or enable automatic posting
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the reputation management features of the Service. We do not sell Google user data, and we do not use it for advertising.
2.4 Staff information
If you use our staff ranking feature, you may enter staff first names and log activity (such as review mentions or upsells) associated with those names. This data is entered and controlled by you, the restaurant account holder, and is used only to power the internal leaderboard shown to your account.
2.5 Usage data
We automatically collect limited technical data, such as log data, IP address, browser type, and pages visited, to operate and secure the Service.
This comes from ordinary server logs, which every web server keeps in order to serve a request at all. It is not collected with tracking cookies or an analytics tool, it is not used to build a profile of you, and it is not combined with data from other websites. See section 10 for what we store on your device.
3. How we use your information
We use the information described above to:
- Provide, maintain, and improve the Service
- Draft and, if you enable it, automatically post replies to your reviews using AI (via our processor, Anthropic)
- Calculate and display your staff leaderboard
- Process payments and manage your subscription
- Send you service related emails, such as account confirmations or password resets
- Provide customer support
- Comply with legal obligations, including Dutch tax and business record keeping requirements
4. Legal basis for processing (GDPR)
We process personal data on the following legal bases:
- Performance of a contract: to provide the Service you signed up for
- Legitimate interests: to secure and improve the Service, and to communicate with you about your account
- Consent: where you have explicitly connected your Google Business Profile or enabled optional features
- Legal obligation: to meet our accounting, tax, and record keeping duties under Dutch law
5. How we share information
We do not sell your personal data. We share information only with the service providers ("subprocessors") that help us operate the Service:
| Subprocessor | Purpose |
|---|---|
| Vercel | Application hosting |
| Neon | Database hosting |
| Stripe | Payment processing |
| Resend | Transactional email delivery |
| Zernio | Google Business Profile connection |
| Anthropic | AI generated review reply drafting |
Each of these providers is contractually required to protect your data and may only use it to provide their service to us. Some of these providers may process data outside the European Economic Area (EEA); where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses.
We may also disclose information if required by law, or to protect the rights, safety, or property of Reputal Solutions or others.
6. Data retention
We retain your account and business data for as long as your account is active. If you cancel your subscription, we retain your data for a limited period afterward in case you wish to reactivate, and then delete or anonymize it, except where we are required to retain records for legal or tax purposes (typically 7 years for financial records under Dutch law).
7. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to certain processing
- Request a portable copy of your data
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at jens@reputalsolutions.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
8. Data security
We use industry standard measures, including encrypted connections and hashed passwords, to protect your data. No system is perfectly secure, and we cannot guarantee absolute security, but we work to keep your data protected and will notify you and relevant authorities of any data breach as required by law.
9. Children's privacy
The Service is intended for business use by restaurant owners and staff, and is not directed at children. We do not knowingly collect personal data from anyone under 16.
10. Cookies and similar technologies
We store only what is strictly necessary to run the site and the Service. There is no analytics, no advertising or marketing pixel, no session recording, and no embedded third-party tracker anywhere on this site.
What we do store:
- reputal_session, a session cookie that keeps you signed in after you log in. Encrypted, signed, and limited to same-site requests. It is only set once you have an account and log in.
- Stripe checkout cookies, set by Stripe on their own checkout pages when you start a subscription, to process the payment and prevent fraud. These are necessary for a transaction you have actively started.
- Your cookie choice, kept in your browser's localStorage so we do not ask again on every visit. It stays on your device and is never sent to our servers.
Under article 11.7a of the Dutch Telecommunicatiewet these are exempt from the consent requirement, because each one is needed to deliver something you asked for. We ask anyway, because your answer is what governs whether anything non-essential may load in the future. If we ever add analytics, it will only load for visitors who have accepted, and it will be listed before it goes live. Choosing Reject, or never answering at all, limits no part of this site.
You can change your answer at any time with the link in the footer of any page.
Our Cookie Policy covers all of this in more detail, including a full table of what is stored and for how long.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
Reputal Solutions
Email: jens@reputalsolutions.com
WhatsApp: +31 6 30731471
Amsterdam, the Netherlands

