Legal

Privacy Policy

Effective April 30, 2026

Information we process

Reposeek processes account information from Supabase Auth, billing identifiers from Stripe, API-key metadata, search usage counters, and operational logs needed to run the service.

Anonymous demo

The public demo stores a daily counter keyed by a SHA-256 HMAC of your IPv4 address or IPv6 /64 prefix. Demo logs may include the hashed IP prefix, a SHA-256 hash of the query, and timestamp for abuse triage. Full demo result sets are not logged by the web app.

Retention

Demo usage rows are retained for up to 30 days. Account, billing, and API-key metadata are retained while your account is active or as needed for security, accounting, and legal obligations.

Processors

Reposeek uses Supabase for authentication and database hosting, Stripe for billing, Vercel for web hosting, Cloudflare Turnstile for demo abuse protection, and hosted retrieval providers for search execution.

Contact

Privacy questions can be sent to hello@reposeek.app.