Privacy Policy

Last updated: 2026-04-20

RepIn60 ("the Service", "we") is operated by Lewis Corporation, registered in Japan. This policy explains what data we collect when you use the Service, how we use it, who we share it with, and the rights you have over it.

1. What data we collect

Account data. When you sign in with Google, we receive your name, email address, profile picture, and a unique Google account identifier. We also receive short-lived access tokens and a refresh token so we can act on your behalf (see "Google Sheets access" below).

Lead data. When a contact form sends a lead to your webhook URL, we receive the lead's name, email address, phone number (if provided), message text, and an optional source label. This data is supplied by your website visitors through forms you operate.

AI-generated content. We store the reply our AI generates for each lead so you can see it in your dashboard.

Configuration data. Your system prompt, stated availability, Google Sheet ID, and subscription status.

Technical data. Server logs, error reports, and deployment telemetry from our hosting provider. We do not use third-party analytics cookies.

2. How we use your data

• Generate a personalized reply to each lead using your system prompt and the lead's message.
• Send that reply as an email to the lead on your behalf, using the email credentials you provide.
• Append each lead and its reply as a new row in a Google Sheet that you own and control.
• Display leads and statistics in your dashboard.
• Provide support and fix bugs.
• Bill you for your subscription, if you are on a paid plan.

3. Google API scopes

https://www.googleapis.com/auth/drive.file — Google Drive file-level access. This is a narrow, non-sensitive scope. It allows the Service to access only files the Service itself has created, or files the user has explicitly selected via the Google Picker dialog. The Service cannot see, read, or modify any other file in your Google Drive. The Service uses this scope exclusively to create (or append rows to) the specific Google Sheet you connect during onboarding for logging leads and AI replies. The Service reads the header row of that one sheet to detect your existing column order so that new rows align correctly. On first write to an empty sheet, the Service applies initial visual formatting (bold header styling, column widths, text wrapping, frozen header row); subsequent writes do not reformat so any styling you apply is preserved. If you explicitly choose to delete a lead from the dashboard and opt in to "also delete from Google Sheet," the Service reads the email cell of the corresponding row to verify a match and deletes that one row. The Service does not share sheet data with third parties and does not use sheet data for any purpose other than the lead-logging feature.

https://www.googleapis.com/auth/gmail.send — Gmail send access. This scope lets the Service send outgoing messages from your own Gmail address. Per incoming lead, the Service sends at most two messages: (1) the AI-generated reply, addressed to the lead's email, so the lead receives a reply from you rather than from a shared sender; and (2) an optional internal notification sent to your own email address summarizing the new lead, so you know about it in real time. The internal notification can be turned off in Settings. We use the scope exclusively for these two purposes. The Service does not read, list, modify, delete, or label any message, draft, thread, or setting in your mailbox, and does not send any message other than these two per lead.

RepIn60's use and transfer of information received from Google APIs — including data from the Sheets and Gmail scopes above — adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train AI or ML models.

4. Who we share data with

We share data only with the processors necessary to run the Service:

• OpenAI — receives the lead's message and your system prompt in order to generate the reply. OpenAI processes the request per its own data policy. No account data is sent to OpenAI.
• Google (Sheets API, Gmail API) — receives the lead row to append and the outgoing email to deliver.
• Supabase — hosts our Postgres database in the United States (us-west-2).
• Vercel — hosts the Service in the United States.
• Stripe — processes subscription payments for paid plans.

We do not sell your data. We do not use your leads or replies to train machine learning models.

5. How long we keep data

We keep lead data and AI replies for as long as your account is active, or until you delete them from the dashboard. If you cancel your account, we delete your account data and leads within 30 days. Your Google Sheet remains in your own Drive and is not affected by cancellation.

6. Your rights

You may request access to, correction of, or deletion of your data at any time by emailing support@repin60.com. You may also revoke the Service's access to your Google account at any time from your Google Account permissions page.

7. Age requirement

The Service is intended for business use by adults. You must be at least 18 years old to use the Service. The Service is not directed at minors and we do not knowingly collect data from them.

8. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above and, if the change is material, notify active users by email.

9. Contact

Lewis Corporation
support@repin60.com