Privacy policy | Repwing

1. Scope and responsible operator

This notice covers the Repwing marketing preview, not a deployed calling or CRM service. The operator's legal name, postal address, privacy contact and applicable supervisory authority have not yet been supplied. These are required completion items before this notice can be treated as final.

2. Hosting and access data

The site is published through OpenAI Sites. Delivery and security infrastructure may process your IP address, requested URL, access time, user agent and technical error data. Serving and securing the website is the intended purpose; legitimate interests under Article 6(1)(f) GDPR are the proposed basis, subject to the operator's assessment. Exact service recipients, locations, contracts, safeguards and log retention have not yet been confirmed.

3. Forms and the current waitlist

The form asks for work email, company and sales-team size. In this preview, no waitlist endpoint is configured: submission does not save a registration or send those fields to a form backend. An email entered in the homepage is temporarily carried to the waitlist page through sessionStorage and removed when that page reads it. Do not treat the current confirmation page as proof of registration.

Before real collection begins, the operator must disclose the provider, purpose, lawful basis, recipients, retention period and withdrawal contact. Form submission must then accurately reflect successful storage.

4. Browser storage and analytics

localStorage stores repwing-consent, your preference on this browser, until you change it or clear site data. sessionStorage may temporarily hold repwing-prefill-email for the form handoff during the current tab session. Google Analytics has no valid measurement ID and is not loaded in this configuration. There are no configured advertising trackers. See the cookie policy or .

Observed hosting cookie: __cf_bm, set by Cloudflare for bot-management security; HttpOnly, Secure and approximately 30 minutes. This is separate from analytics. See Cloudflare cookie documentation. Other hosting arrangements remain to be confirmed.

5. External fonts

Google Fonts stylesheets and font files are requested from fonts.googleapis.com and fonts.gstatic.com. Your browser sends technical connection data, including IP address, to these services. Fonts are requested independently of optional analytics consent. Provider terms, processing locations and the applicable lawful basis must be reviewed by the operator. See Google Fonts privacy information.

6. AI demonstrations and automated decisions

The displayed conversations use fictional people and companies. This website does not initiate telephone calls, record audio, connect to a CRM or make decisions about visitors. Any future real-customer pilot needs its own notice, documented consent and provider assessment before use.

7. Retention and international transfers

The browser-storage lifetimes are listed above. No registration database or analytics retention is configured. Hosting log retention and international transfer arrangements remain to be confirmed with the actual providers; no specific EU hosting or transfer safeguard is asserted here.

8. Your rights

Where applicable, GDPR provides rights of access, correction, erasure, restriction, portability and objection. Consent can be withdrawn for future processing without affecting prior lawful processing. You may complain to a competent supervisory authority. Requests require the operator's real contact details, which are still outstanding.

9. Security and voluntary information

Pages are delivered over HTTPS. This preview does not ask for payment details, sensitive data, audio or customer transcripts. Please do not enter such information into the forms. No specific security certification is claimed.

10. Updates and legal reference

Reviewed on 2026-10-14 against the current website configuration. Changes to providers or collection require an updated notice. Legal reference: GDPR, including Articles 13 and 15–21.