Privacy policy

Information used by RepPilot

Account information includes your name, email, password hash, optional phone and job title, timezone, organization membership, and role. RepPilot also stores business records you or your organization enter: practice and business-contact details, visit notes, follow-ups, routes, appointments, lunch requests, meal-policy reviews, spending records, and uploaded receipts.

Sessions, access logs, security audit records, and email-delivery metadata support sign-in, troubleshooting, and abuse prevention. Outgoing email bodies are not retained in delivery records by the current sender; older copies require the data-redaction migration to be applied.

Location, speech, and local drafts

If you choose to share device location, it is used for territory maps, nearby practices, and route calculations. Visit coordinates can be stored when included with a check-in. You can decline location access and enter or select practices manually.

Dictation uses speech recognition supported by your browser or device. Its provider may process audio outside RepPilot. You can type instead. Notes may be kept as a draft in browser storage until saved or removed; do not use a shared device for confidential drafts. Clearing browser storage removes local drafts but does not delete your RepPilot account.

Service providers and optional integrations

Hosting and database providers process data needed to run the service. When configured, Resend receives recipients and message content to deliver operational email. Google Maps services or OpenStreetMap receive requests needed to display maps; configured Google Places, geocoding, and routing services receive search, address, or route information.

If configured, Google Gemini receives text used to prepare briefings or conversation suggestions. AI output can be inaccurate and should be reviewed. Do not include patient information. Error-monitoring providers or configured operational webhooks may receive diagnostic messages.

If you connect Google Calendar or Microsoft 365, RepPilot stores encrypted authorization tokens and uses the authorized calendar access for scheduling, availability checks, and event creation. You can disconnect in Calendar and revoke access in the provider account. Existing external calendar events are not automatically removed by disconnecting.

Practice information is visible to authorized organization members according to the service’s access rules. Scheduling links share the relevant offered times and meeting details with recipients. Opening an external catering, navigation, or calendar website is subject to that provider’s practices. Salesforce and HubSpot referral connections and payment processing are not active features in this version.

Retention and deletion

Account and organization records are kept while they are needed to provide the service. You can initiate account deletion in Settings or through the account-deletion page, including after uninstalling the app. Submitting a request does not mean deletion is already complete.

Confirming your password removes your sign-in, profile, calendar connections, notifications, and AI records, and signs you out. Practice, visit, meeting, lunch, and spending records your organization keeps remain available to that organization. Your name on those records is replaced with Deleted user. Other members’ accounts are not deleted.

Backup copies, and messages or events already held by an email or calendar provider, are cleared within 30 days where that provider allows it. dathan@abagrowth.com is the operator for that remaining cleanup. Contact support for the backup-retention schedule.

Your choices and account security

You can edit your profile, change your password, decline optional device permissions, type instead of using speech, and disconnect calendar access. Contact support to request access to or correction of data you cannot change yourself. Use a unique password and do not share your sign-in details.

RepPilot is a business outreach and scheduling tool. It is not intended for storing patient names, diagnoses, medical records, or other protected health information. Do not upload those details in notes or receipts. A warning or keyword check cannot guarantee that content contains no patient information.

Changes and questions

Changes to data practices will be reflected on this page with an updated date. Privacy questions and requests can be sent to dathan@abagrowth.com.