Privacy Policy.

This policy explains what personal data Reprisa (“we”) collects when you use reprisa.ai, the Reprisa application, and the Reprisa API, how we use it, who we share it with, and the choices you have. Using the Service means this policy applies to you.

Account data. When you sign up we collect your email address, name, and username. Authentication — including password storage and session handling — is provided by Supabase; we never see your password in plain text.

Billing data. Payments are processed by Stripe. Stripe collects and stores your card details; Reprisa never stores card numbers. We keep a record of your plan, subscription status, and billing history.

Content you create. Your report inputs and generated reports, watchlist entries, trend monitors, and community posts, comments, and votes are stored against your account so the Service can function.

Usage data. We use PostHog for product analytics — events such as pages viewed and features used, along with device and browser information — to understand how Reprisa is used and improve it.

• to provide the Service: generate reports, run analyses, sync your watchlist, and show your community activity;
• to manage your subscription and process payments through Stripe;
• to send transactional and product emails (delivered via Resend) — for example report notifications and account emails;
• to understand product usage and improve Reprisa (PostHog analytics);
• to keep the Service secure, prevent abuse, and enforce our Terms;
• to comply with legal obligations.

Reprisa’s reports and analyses are produced by Echo, our research engine, which runs on AI models from Anthropic (our AI model provider). When you request a report, your report inputs (and relevant market data) are sent to the model provider to generate the output. We do not send your account credentials or billing details to the model provider.

We share data with a small set of processors, only as needed to run the Service:

• Supabase — database hosting and authentication;
• Stripe — payment processing and subscription billing;
• Anthropic — our AI model provider, which powers the Echo engine (AI model processing of report inputs);
• PostHog — product analytics;
• Resend — email delivery.

Each provider processes data under its own terms and safeguards. We may also disclose data if required by law, or as part of a merger or acquisition — in which case this policy continues to apply until updated.

We do not sell your personal data, and we do not share it with third parties for their advertising.

Reprisa uses cookies for two things: keeping you signed in (session authentication cookies set by our auth provider) and remembering your preferences. We do not use third-party advertising cookies.

We keep your data for as long as your account is active. If you want your account and associated data deleted, contact us at contact@reprisa.ai from your account email and we will delete your account, reports, watchlist, and community content, except where we must retain records (for example billing records) to meet legal obligations.

Depending on where you live, you may also have rights to access, correct, export, or restrict the processing of your personal data. Contact us and we will honor applicable requests.

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls, and reliance on vetted infrastructure providers. No system is perfectly secure — if we learn of a breach affecting your personal data, we will notify you as required by law.

Reprisa is not directed at children and may not be used by anyone under 18. We do not knowingly collect personal data from children.

We may update this policy from time to time. If a change is material, we will give notice — for example by email or an in-app notice — before it takes effect. The “Effective date” above reflects the latest revision.

Questions about privacy at Reprisa? Contact us at contact@reprisa.ai.