Privacy notice

Updated 25 September 2026. This notice covers the Repvexa website, paid services and pilot workspaces.

Information we use

We store enquiry contact details, business registrations, assigned user identities, operational records, uploaded evidence and activity history. Sign-in is provided through ChatGPT; Repvexa receives your user identifier and email. Repvexa does not ask for your ChatGPT or Google password. Managers set a separate Repvexa password; a salted password hash is stored, not the plain password.

Purpose and access

We use this information to answer enquiries, deliver the agreed services, control business access and investigate service problems. Assigned business users and authorised Repvexa operators can access records within their roles. Upload only information you are authorised to provide and necessary for the agreed workflow.

Providers and connections

Hosting, authentication and storage providers process data to operate the service. Optional Google, AI, accounting or messaging connections require separate setup; their data scope and provider terms must be agreed before use. These services may process data outside South Africa.

Document analysis

Files uploaded to a record are stored as private business evidence. Uploading alone does not send their contents to an AI provider. When an authorised user requests document analysis and confirms permission, the selected file and its record type, title and field definitions are sent to OpenAI. The resulting summary and suggested fields are saved with that document for review. Suggestions do not automatically change operational records. AI requests use store:false; provider retention and processing terms still apply. Only upload and analyse documents you are authorised to share for this purpose.

Retention and requests

Operational records and audit history are retained during the pilot unless a different period is agreed. Archiving a record hides it from active work; it is not deletion. Contact repvexa@gmail.com to request access, correction, export or deletion, or to end a pilot. We will verify authority and confirm the applicable retention and deletion steps, including any necessary legal retention.

Cookies and technical information

Authentication uses the hosting platform’s session mechanisms. Technical access logs help operate and secure the service. This website does not install advertising analytics.

Agreement and payment evidence

When an authorised customer accepts a paid agreement, we save their sign-in user ID and email, declared name and authority, server timestamp, the exact terms and package snapshot, and integrity hashes. Payment references may be linked later. These records are available to the accepting customer while authorised and to the Repvexa owner. They are used to administer the contract and address disputes, not for marketing. They are kept during the agreement and ordinarily for five years after it ends, subject to a justified legal hold or longer legal requirement. Contact us for access, correction or a retention review; corrections preserve the original historical record. We do not store card numbers or CVVs.

Contact

Email repvexa@gmail.com with a privacy question or concern. Please do not email passwords or unnecessary customer records.