Privacy policy

What we keep about you, who can see it, how long it stays, and how to get a copy or delete it.

Last updated October 14, 2026

In short

We keep as little as we can. Your ID document never reaches us.
Your public Rep shows your display name, area, trust color, deals and ratings. Nothing else is public.
Deal details, claims, proof and report evidence are seen only by the people in that deal or report, and by a reviewer when a report is sent to one.
We don’t sell or share your information with advertisers.
You can ask for a copy of your data, or to delete your passport, any time.

Who we are

Rep is run by Grant Little Studio, LaSalle, Ontario, Canada. For anything about your data, write to privacy@joinrep.app. The Ontario pilot follows Canada’s private-sector privacy law (PIPEDA).

What we keep, and who sees it

Email address
Who sees it
Only you and us. Used to sign in and for the emails below.
Kept
Until you delete your Rep
Display name, area (town or city), link name
Who sees it
Public, on your Rep
Kept
Until you delete your Rep
Passkeys (a public key and a device name)
Who sees it
Only you
Kept
Until you remove them
ID check: pass or fail, 18 or older, two one-way codes for the document and the person
Who sees it
Only us, for duplicate checks
Kept
As long as the Rep exists
Deals: item, price, claims, proof photos and files
Who sees it
The two people in the deal, and a reviewer if a report about it is sent to one
Kept
2 years after the deal closes
Signed receipts
Who sees it
The two people in the deal. The receipt number can be checked by anyone, which shows only that it’s genuine and when it was signed
Kept
As long as the Rep exists
Ratings and comments
Who sees it
Public, once both sides have rated or 14 days pass
Kept
As long as the Rep exists
Check-ins (“still as described”)
Who sees it
Shown on the seller’s Rep as a count
Kept
As long as the Rep exists
Reports: what happened, replies, offers, evidence, screen recordings
Who sees it
The two people in the report, and a reviewer once it’s sent to one. Only upheld or resolved outcomes show on a Rep
Kept
Files for 2 years after the report closes; the outcome stays
Sign-in sessions and a device description
Who sees it
Only you
Kept
30 days
Emails we sent you
Who sees it
Only us, so each one goes out once
Kept
As long as the Rep exists

What we never keep: your ID document or its number, your date of birth, your exact location, your messages on other sites (a screen recording you add to a report is kept as evidence of that report only), or anything about people who haven’t joined.

The ID check

The ID check is done by a specialist provider. It scans your document and checks that you’re a real, living person. We receive the result, whether you’re 18 or older, and two one-way codes made from your document and from your name and birth date. The codes let us stop one person from making two Reps; they can’t be turned back into your details. The provider keeps the images for the shortest time its rules allow. We never see them.

What we use it for

To show your Rep to the people you deal with, and theirs to you.
To record deals both people signed, and to work out the trust color from the public rules.
To send the emails the service needs: sign-in codes, check requests, rating reminders, check-ins and report updates. No marketing.
To decide reports fairly, with the evidence both sides gave.
To keep the service safe: one person, one Rep; limits on how often someone can ask for checks or sign-in codes.

Who else gets it

Companies that run parts of the service, under contracts that limit them to that work:

Supabase: the database and the file storage.
Railway: the servers the app runs on.
Resend: sends our emails.
The ID check provider, when you choose to verify.

We share information with others only when the law requires it, or to protect someone from serious harm.

Your choices

Change your name and area on the Account tab, any time.
Remove a passkey on the Account tab.
Get a copy of your data, or delete your passport: email us and we’ll do it within 30 days.
When you delete your passport, your name and link go, and your details are removed. Deals that other people signed with you stay in their records, with your name replaced. The one-way codes from your ID check are kept so a deleted passport can’t be used to start fresh after a problem.

Security

Every deal is signed with the passkeys on both phones. Sessions and codes are stored as one-way hashes. The database enforces who can read what, and the rules themselves are public. Files are private and served only to the people allowed to see them.

Changes

If this policy changes in a way that matters, we’ll say so on this page and by email. Questions or complaints: privacy@joinrep.app. You can also contact the Office of the Privacy Commissioner of Canada.

See also the terms of use and the community guidelines.