{"id":3717,"date":"2025-05-24T13:33:12","date_gmt":"2025-05-24T13:33:12","guid":{"rendered":"https:\/\/reppic.ai\/privacy-policy-reppic-platform\/"},"modified":"2026-09-30T06:25:34","modified_gmt":"2026-09-30T06:25:34","slug":"privacy-policy-reppic-platform","status":"publish","type":"page","link":"https:\/\/reppic.ai\/en\/privacy-policy-reppic-platform\/","title":{"rendered":"Privacy Policy \u2014 Reppic Platform"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\n

Privacy Policy \u2014 Reppic Platform<\/strong><\/p>\n\n

Effective date: September 2, 2026 Last updated: September 2, 2026<\/p>\n\n

1. Who we are<\/strong><\/p>\n\n

Reppic is a product of The Sales Studios B.V., based in the Netherlands (Chamber of Commerce no. 97393142).<\/p>\n\n

For privacy questions: privacy@reppic.ai<\/p>\n\n

2. Scope of this policy<\/strong><\/p>\n\n

This policy covers the entire Reppic platform: the mobile app, the web application (app.reppic.ai), all dashboards (salesperson, sales manager, CCO\/executive), and the associated integrations (calendar, CRM, call recording).<\/p>\n\n

3. When we are a processor vs. a controller<\/strong><\/p>\n\n

Which of the two situations below applies to you depends on how your account was created; it is not a choice Reppic makes for the platform as a whole. Both situations occur at the same time for different users. <\/p>\n\n

You use Reppic through an employer or client (you work for a Reppic customer and your account was created or required by your employer). In this case, your employer is the data controller for your conversation data, scores, and performance insights. The Sales Studios B.V. acts as a processor, under a data processing agreement with your employer. Rights requests in this case can also go through your employer; we support them in handling these.You hold a direct individual account (trial, individual subscription) without an employer-customer involved. In this case, The Sales Studios B.V. is the controller. <\/p>\n\n

4. What data we collect<\/strong><\/p>\n\n

Account informationEmail address, name, role (salesperson \/ manager \/ CCO)Authentication token (JWT), 2FA statusConversation dataAudio recordings you start yourself (app) or that come in via a connected calling service (Zoom, Microsoft Teams, Google Meet, Recall)Transcripts (via AssemblyAI or a comparable service)AI-generated analysis: PICA scores (Proposition, Inventory, Persuasion, Closing), DMU analysis, rubric scores, summariesCalendar and CRM data (pre-call brief)Calendar data from connected Google Calendar\/Outlook accounts, within a 48-hour window before a scheduled callContact and deal data from connected CRMs (HubSpot, Salesforce, Pipedrive)Strategic and team dataUploaded strategic plans (executive\/CCO level)Aggregated team and organizational data in manager and CCO dashboardsTechnical dataIP address, device type, operating system, log filesLocal storage on your deviceDrafts, language preference, settings (expo-secure-store \/ AsyncStorage)<\/p>\n\n

5. Data of conversation participants (non-users)<\/strong><\/p>\n\n

Reppic processes conversations where the other party (your customer or prospect) has no Reppic account and may not have seen this policy. We address this separately because it requires a different legal basis and disclosure approach than processing our own users\u2019 account data. <\/p>\n\n

Legal basis: legitimate interest of the organization conducting the call (quality assurance, coaching, customer insight), provided it does not disproportionately affect the interests of the conversation participant.Disclosure obligation: Reppic customers are responsible for informing their conversation participants that the call is being recorded and analyzed (e.g., via a notice at the start of the call).Retention and rights: see section 8. Conversation participants can submit access or deletion requests to privacy@reppic.ai; we route the request to the relevant customer organization where they are the controller. <\/p>\n\n

6. Purposes and legal bases<\/strong><\/p>\n\n

Purpose Legal basisAuthentication and account management Performance of a contractProcessing recordings into transcript and analysis Performance of a contract (or: controller\u2019s instructions, where we act as processor)Generating coaching feedback for the individual salesperson Performance of a contractGenerating team and performance insights for managers\/CCO Employer\u2019s legitimate interest, subject to proportionality \u2014 see section 7 on the AI ActPre-call brief (calendar\/CRM integration) Performance of a contract, after active connection by the userImproving the service Legitimate interestTechnical support Legitimate interest<\/p>\n\n

7. Use of AI transparency and your rights<\/strong><\/p>\n\n

Reppic uses AI models to transcribe, score, and analyze conversations. Because these analyses are used to assess employee performance and behavior, this system may fall under the EU AI Act as a high-risk AI system (Annex III, category 4(b): monitoring and evaluation of the performance and behavior of workers). <\/p>\n\n

Where applicable, this means:<\/p>\n\n

Human oversight: AI-generated scores are intended solely as a tool for coaching and personal development. Reppic scores must never be used as a control mechanism and must never be used directly in promotion or termination decisions. Customer organizations using Reppic commit to this, and it is also set out contractually in customer terms. Where a score does inform a formal HR assessment, human review is required and the individual has the right to request human re-evaluation (see also GDPR Art. 22 and the AI Act\u2019s requirements for high-risk AI systems).Disclosure: employees whose conversations are analyzed are informed by their employer when Reppic is introduced, and via this policy.Conformity status: We continuously assess whether and to what extent our AI systems qualify as high-risk under the EU AI Act, and what obligations follow from that. The current status of this assessment is available on request via privacy@reppic.ai.Models we use: Anthropic Claude (analysis), AssemblyAI (transcription) <\/p>\n\n

We recommend that customer organizations (employers) involve their works council when introducing Reppic, given the potential applicability of consent rights for systems that can monitor employee behavior or performance.<\/p>\n\n

8. Retention periods<\/strong><\/p>\n\n

Data type Retention periodAccount information As long as the account is active, +30 days after terminationAudio recordings 30 days after processing, then automatically deletedTranscripts (raw conversation text) 30 days after processing, then automatically deletedAI analysis, PICA scores, and reports Remain available in the dashboard as long as the account is active (see also \u201cAccount information\u201d above)Calendar\/CRM data via pre-call brief Deleted after 30 days or when the connected time window expiresLocal drafts On device, until deleted by the userLog files Up to 90 days<\/p>\n\n

9. Sharing data \u2013 subprocessors<\/strong><\/p>\n\n

We never sell personal data to third parties. We share data with: <\/p>\n\n

Subprocessor Function LocationAssemblyAI Transcription EU processing (Dublin, Ireland). DPF-certified.Recall Capturing\/relaying meeting recordings (Zoom, Teams, Google Meet) US (Hyperdoc Inc.) \u2013 per Recall\u2019s own privacy policy, data is stored on US servers; we found no Recall-confirmed EU storage optionAnthropic AI analysis (Claude) US. Transfers rely on EU Standard Contractual Clauses (SCCs) \u2013 no DPF certification claimed.Own infrastructure (The Sales Studios B.V.) Hosting Amsterdam, the NetherlandsHubSpot CRM integration EU (Frankfurt), DPF-certifiedSalesforce CRM integration EU (Hyperforce EU zone, incl. Frankfurt\/Paris), DPF-certifiedPipedrive CRM integration EU (Frankfurt\/Dublin\/Stockholm; EU contracting entity in Estonia), DPF-certified <\/p>\n\n

All subprocessors are bound by a data processing agreement and may use data solely for the agreed purposes.<\/p>\n\n

10. International transfers<\/strong><\/p>\n\n

Where data is processed outside the EEA, we apply appropriate safeguards under the GDPR. HubSpot, Salesforce, Pipedrive, and AssemblyAI use EU hosting or EU processing respectively (see section 9), backed by their DPF certification. For Recall and Anthropic, which do process data outside the EEA, we rely on EU Standard Contractual Clauses (SCCs) as the transfer mechanism. <\/p>\n\n

11. Security<\/strong><\/p>\n\n

HTTPS encryption for all data transfersSecure token storage on device (expo-secure-store)Access security on our serversAutomatic deletion of audio files after the retention period (section 8)<\/p>\n\n

12. Your rights<\/strong><\/p>\n\n

As a data subject in the EU\/EEA, you have the right to: access, correction, deletion, restriction, portability, objection to processing based on legitimate interest, and \u2014 where applicable to AI-driven assessment \u2014 the right to request human review of an AI-generated score before it is used in a formal judgment.<\/p>\n\n

Send your request to privacy@reppic.ai. Where your employer is the controller, we route your request to them and support the handling of it. We respond within 30 days. <\/p>\n\n

You may file a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl<\/p>\n\n

13. Changes<\/strong><\/p>\n\n

We will notify users of material changes via the app, by email, or where the employer is the controller, via the customer organization.<\/p>\n\n

14. Google user data and Limited Use<\/strong><\/p>\n\n

When you connect a Google account, Reppic requests the following Google OAuth scopes:<\/p>\n\n

https:\/\/www.googleapis.com\/auth\/calendar.events.readonly<\/code> \u2014 read-only access to your upcoming calendar events (event title, start\/end time, location, organizer, and attendee email addresses). Reppic uses this to identify the external customer from the attendees and to generate a short meeting-preparation briefing that is emailed to the relevant salesperson about a day before the meeting. Reppic never creates, edits, or deletes calendar entries. https:\/\/www.googleapis.com\/auth\/userinfo.email<\/code> \u2014 your account email address, used only to display which Google account is connected in your calendar settings.<\/p>\n\n

Reppic’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https:\/\/developers.google.com\/terms\/api-services-user-data-policy<\/a>), including the Limited Use requirements. Specifically, Google user data obtained through these scopes is: <\/p>\n\n

used only to provide the user-facing meeting-preparation feature you enabled;never used for advertising;never sold, and not shared with third parties except our subprocessors strictly to provide the feature (see section 9), to comply with applicable law, or as part of a merger or acquisition with prior notice;never used to develop, improve, or train generalized or non-personalized AI and\/or ML models;not accessed by humans, except with your explicit consent, for security or abuse-prevention purposes, to comply with applicable law, or on aggregated\/anonymized data for internal operations.<\/p>\n\n

You can disconnect your Google account at any time via Settings \u2192 Calendar, after which Reppic stops processing new events and deletes calendar-derived data on request (privacy@reppic.ai). The same Limited Use principles apply to calendar data obtained via Microsoft. <\/p>\n\n

15. Contact<\/strong><\/p>\n\n

The Sales Studios B.V. St. Geradushof 1, 4744 BC Bosschenhoofd, the Netherlands Email: privacy@reppic.ai Website: https:\/\/reppic.ai<\/a> <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Privacy Policy \u2014 Reppic Platform Effective date: September 2, 2026 Last updated: September 2, 2026 1. Who we are Reppic is a product of The Sales Studios B.V., based in the Netherlands (Chamber of Commerce no. 97393142). For privacy questions: privacy@reppic.ai 2. Scope of this policy This policy covers the entire Reppic platform: the mobile […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_surecart_dashboard_logo_width":"180px","_surecart_dashboard_show_logo":true,"_surecart_dashboard_navigation_orders":true,"_surecart_dashboard_navigation_invoices":true,"_surecart_dashboard_navigation_subscriptions":true,"_surecart_dashboard_navigation_downloads":true,"_surecart_dashboard_navigation_billing":true,"_surecart_dashboard_navigation_account":true,"inline_featured_image":false,"footnotes":""},"class_list":["post-3717","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/pages\/3717","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/comments?post=3717"}],"version-history":[{"count":4,"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/pages\/3717\/revisions"}],"predecessor-version":[{"id":4393,"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/pages\/3717\/revisions\/4393"}],"wp:attachment":[{"href":"https:\/\/reppic.ai\/en\/wp-json\/wp\/v2\/media?parent=3717"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}