Privacy Policy

Signing in

Sign-in is handled by Google (and Microsoft, where enabled). Repo never sees or stores a password, because there is no password — it is the same OAuth flow you use everywhere else. When you first sign in, we receive your name, email address and profile picture from the provider.

What is stored

• Your name, email address and profile picture from your sign-in provider.
• The organizations and spaces you belong to, and the role you hold in each.
• The pages you and your organization create, including their full history of saved versions.
• The chat messages you send when generating or editing a page, so you can see what was asked for.
• If you connect an app or agent over MCP, the authorization it holds and when it was last used.

Page generation

Writing or editing a page sends your request, and the page's current content, to a third-party AI provider (via OpenRouter) to generate the result. That request is not used to train the provider's models. Nothing is sent for this purpose unless you actively ask a page to be written or changed.

Who your data is visible to

Everything you write is scoped to your organization — nobody outside it can see your spaces or pages through the normal product. Two exceptions, both ones you control: a page you explicitly share with a public link, and an app or agent you explicitly authorize over MCP, which can only reach the organizations you belong to.

What we do not do

We do not sell your data. We do not show ads. We do not track you across other sites.

Deleting your data

Archiving a page or space keeps it recoverable; permanently deleting it removes it. To close your account entirely, or with any question about this policy, contact no-reply@repo.byronfichardt.com.