Privacy Policy

This Privacy Policy explains how RepKlord ("we", "us", or "our") collects, uses, stores, and shares information when you use our website, application, and related services, including the Claude MCP connector (the "Service").

For privacy questions or requests, contact us at [email protected].

Depending on how you use the Service, we may collect:

• Account information. Name, email address, profile image, and identifiers provided by your sign-in provider (for example Microsoft).
• Organization data. Organization name, membership roles, invites, and related settings you or your administrators configure.
• Report content. HTML reports and related metadata (such as titles, slugs, tags, and publish status) that you or your organization upload or publish through the Service or the MCP connector.
• Authentication and MCP data. Session information, OAuth tokens, client registration details, and consent records needed to keep you signed in and to allow Claude (or other authorized MCP clients) to act on your behalf.
• Usage and technical data. Log data such as IP address, browser or client type, timestamps, request paths, and error diagnostics needed to operate and secure the Service.

We use information to:

• Provide, operate, and improve the Service
• Authenticate users and enforce organization access controls
• Host and serve published reports to authorized viewers
• Enable MCP tools (for example publishing reports or inviting members)
• Communicate about service, security, or account issues
• Prevent abuse, debug incidents, and meet legal obligations

We do not sell your personal information. We do not use your report content to train foundation models.

We may share information with:

• Service providers that host infrastructure, databases, object storage, email, or monitoring on our behalf, under contractual confidentiality and security obligations
• Identity providers you choose to sign in with (Microsoft), according to their own privacy policies
• Organization administrators and authorized members who can access reports and membership data within your organization
• MCP clients you authorize (such as Claude) to the extent needed for the tools and scopes you approve
• Authorities or other parties when required by law, or to protect rights, safety, and the integrity of the Service

Your organization controls the personal data and business content placed in reports and invites. Organization administrators are responsible for ensuring they have a lawful basis to upload, publish, and share that content with members of the organization.

When we process report content and organization membership data for your use of the Service, we generally act as a processor (or service provider) for that customer content, and your organization is the controller (or business). Account and billing contact information we process to operate RepKlord itself is typically processed as a controller.

We store data with reputable cloud providers. Report files may be stored in object storage. Account, organization, and auth data are stored in our application database.

We retain information for as long as your account or organization needs the Service, and for a reasonable period afterward for backups, dispute resolution, security, and legal compliance. You or an organization administrator may request deletion of an account, organization, or report content subject to technical and legal limits.

We use industry-standard safeguards (such as encryption in transit and access controls). No method of transmission or storage is completely secure.

We may process and store information in regions where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Depending on where you live, you may have rights to access, correct, delete, or export personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, email [email protected]. We may need to verify your identity and, for organization data, involve your organization administrator.

We use essential cookies and similar technologies for sign-in, session management, and security. We do not use third-party advertising cookies on the Service.

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy, except where applicable law requires additional notice or consent.

Privacy requests: [email protected]