Privacy Policy

This Privacy Policy explains how RepKlord ("we", "us", or "our") collects, uses, stores, and shares information when you use our website, application, and related services, including the RepKlord MCP connector used with Claude, ChatGPT, or other MCP clients (the "Service").

For privacy questions or requests, contact us at [email protected].

Depending on how you use the Service, we may collect:

• Account information. Name, email address, profile image, and identifiers provided by your sign-in provider (Microsoft or Google).
• Organization data. Organization name, membership roles, invites, and related settings you or your administrators configure.
• Site content. HTML sites and related metadata (such as titles, slugs, tags, and publish status) that you or your organization upload or publish through the Service or the MCP connector.
• Authentication and MCP data. Session information, OAuth tokens, client registration details, and consent records needed to keep you signed in and to allow Claude, ChatGPT (or other authorized MCP clients) to act on your behalf.
• Usage and technical data. Log data such as IP address, browser or client type, timestamps, request paths, and error diagnostics needed to operate and secure the Service.

We use information to:

• Provide, operate, and improve the Service
• Authenticate users and enforce organization access controls
• Host and serve published sites to authorized viewers
• Enable MCP tools (for example publishing sites or inviting members)
• Communicate about service, security, or account issues
• Prevent abuse, debug incidents, and meet legal obligations

We do not sell your personal information. We do not use your site content to train foundation models.

We may share information with:

• Service providers that host infrastructure, databases, object storage, email, or monitoring on our behalf, under contractual confidentiality and security obligations
• Identity providers you choose to sign in with (Microsoft or Google), according to their own privacy policies
• Organization administrators and authorized members who can access sites and membership data within your organization
• MCP clients you authorize (such as Claude or ChatGPT) to the extent needed for the tools and scopes you approve
• Authorities or other parties when required by law, or to protect rights, safety, and the integrity of the Service

Your organization controls the personal data and business content placed in sites and invites. Organization administrators are responsible for ensuring they have a lawful basis to upload, publish, and share that content with members of the organization.

When we process site content and organization membership data for your use of the Service, we generally act as a processor (or service provider) for that customer content, and your organization is the controller (or business). Account and billing contact information we process to operate RepKlord itself is typically processed as a controller.

We store data with reputable cloud providers. Site files may be stored in object storage. Account, organization, and auth data are stored in our application database.

We retain information for as long as your account or organization needs the Service, and for a reasonable period afterward for backups, dispute resolution, security, and legal compliance. You or an organization administrator may request deletion of an account, organization, or site content subject to technical and legal limits.

We use industry-standard safeguards (such as encryption in transit and access controls). No method of transmission or storage is completely secure.

We may process and store information in regions where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Depending on where you live, you may have rights to access, correct, delete, or export personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, email [email protected]. We may need to verify your identity and, for organization data, involve your organization administrator.

We use essential cookies and similar technologies for sign-in, session management, and security.

With your consent, we also use Google Analytics and the Meta Pixel to measure how people find and use the Service (for example, referral traffic and the results of our ads). Analytics cookies are optional: they load only after you Accept in our cookie banner. You can Reject without affecting core functionality, and you can change your choice later via Cookie settings in the site footer.

If you Accept, our servers also send Meta a record of page views, sign-ups, checkout starts, and purchases through the Meta Conversions API. These records include your browser and Meta cookie identifiers, IP address, and user agent, plus hashed (not readable) copies of your email address, name, and billing location. We store your cookie choice in a cookie so our servers can respect it, and we send nothing to Meta if you Reject.

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy, except where applicable law requires additional notice or consent.

Privacy requests: [email protected]