Privacy Policy

Effective Date: March 7, 2026 ·  Operated by: ReputeOS (operated by Lightseekers Media Private Limited)

1. Overview & Legal Basis

ReputeOS is operated by Lightseekers Media Private Limited, incorporated in India. This Privacy Policy applies to users of reputeos.com and all associated services.

We process personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices) Rules, 2011.

By using ReputeOS, you consent to data processing as described in this policy. If you do not agree, please discontinue use and contact us to delete your data.

2. Data We Collect

We do not collect sensitive personal data (Aadhaar numbers, financial account details, health data, biometric data) unless explicitly required and consented to.

3. How We Use Your Data

• Service Delivery: Running discovery scans, calculating LSI scores, generating content and reports
• Account Management: Login, subscription management, billing communications
• Product Improvement: Aggregated, anonymised analytics to improve our AI models and features
• Security: Detecting fraud, abuse, and unauthorised access
• Legal Compliance: Responding to lawful government or court orders under Indian law
• Communications: Product updates, invoices, critical service notices (not marketing without consent)

We do not sell your data, your clients' data, or scan results to any third party.

4. Third-Party Services & Data Sharing

To deliver our service, we share minimal data with these processors:

All processors are contractually bound to handle data per applicable privacy laws. Where data is transferred outside India, we rely on standard contractual clauses and adequacy determinations.

5. Client Data & Confidentiality

ReputeOS is a B2B platform. When you add client profiles to our system, you represent that you have the legal right and necessary consents to process that individual's data for reputation analysis purposes.

Scan results, LSI scores, content, and reports generated about your clients are exclusively accessible by you. We do not share client-specific data between users or use it to train AI models without anonymisation.

If a data subject (your client) requests access, correction, or deletion of their data from our systems, please contact us at privacy@reputeos.com and we will action it within 30 days.

6. Data Retention

• Active accounts: Data retained for duration of subscription plus 90 days post-cancellation
• Deleted accounts: Personal data purged within 30 days of deletion request
• Scan results: Retained for 12 months, then automatically deleted unless you export them
• Payment records: Retained for 7 years per Indian financial regulations
• Logs: Security logs retained for 90 days; access logs for 30 days

7. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act 2023, you have the following rights:

• Right to Access: Request a copy of personal data we hold about you
• Right to Correction: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer
• Right to Withdraw Consent: Withdraw consent at any time; this will not affect the lawfulness of prior processing
• Right to Nominate: Nominate another person to exercise rights on your behalf in case of incapacity

To exercise any right, email privacy@reputeos.com with subject line "DPDP Request — [your right]". We will respond within 30 days.

8. Security

We implement reasonable security practices under the IT (Reasonable Security Practices) Rules, 2011, including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest in Supabase
• Row-Level Security (RLS) ensuring users can only access their own data
• API key authentication with rate limiting on all endpoints
• Admin access restricted by role-based controls
• Regular security audits and dependency updates

If you discover a security vulnerability, please disclose responsibly to security@reputeos.com.

9. Cookies

We use essential cookies for authentication and session management. See our Cookie Policy for full details. You can manage cookie preferences from your browser settings.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. We will notify you via email at least 14 days before material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

11. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act 2023, the details of our Grievance Officer are:

Name: Niddhish P
Email: privacy@reputeos.com
Address: Mumbai, Maharashtra, India
Response Time: Within 30 days of receipt of grievance

Questions about this policy? Contact our Privacy Officer at privacy@reputeos.com or write to us at: Mumbai, Maharashtra, India.