Privacy Policy

1. Who we are

OnlineReputation.top is operated by Nuvogen Limited. Nuvogen Limited is the company responsible for the personal information described in this policy.

In this policy, “we”, “us” and “our” mean Nuvogen Limited, and “the service” means the OnlineReputation.top website and customer application.

2. What this policy covers

This policy covers the OnlineReputation.top marketing site, the customer application you sign in to, and the reputation campaigns run through it. It explains the information involved in providing that service.

OnlineReputation.top is a reputation-management service: it builds and publishes positive content about a person or business, and tracks how that content and other results rank in search. Doing that necessarily involves information about the subject of the campaign, which may be you or may be a business you represent.

3. Information we collect

Account information

When you create an account we store an account identifier issued by our authentication provider, your email address, your name (including first and last name where supplied), and the URL of a profile picture if your sign-in provider supplies one. We record whether an account has operator privileges. We also store the record of whether and when an email address was verified.

Information you provide about the reputation being managed

To run a campaign, the service asks you for information about its subject. This includes:

• the business or personal name the campaign is about;
• the type of business, and a free-text description;
• a location and a website address;
• the search keywords you want to rank for, and competitors you want to be compared against;
• the specific results you want suppressed, and a description of the issues behind them;
• any direction you give about the content you want produced.

This is the most sensitive information in the service, because the reason someone needs reputation management is itself sensitive. Only supply what is needed to run the campaign.

Information generated by using the service

As the service runs, it creates and stores records connected to your account: campaigns and their history, keyword requests, scheduled and completed content jobs, calendar entries, generated articles and documents, published pages and their versions, and snapshots of search rankings taken over time.

Billing information

Payments are taken by Stripe on hosted payment pages. We do not receive or store your card number, expiry date or security code. What we store is the record of the subscription itself: the plan, its status, the identifiers Stripe assigns to the customer, subscription and checkout session, the current billing period dates, trial end date, and any cancellation date.

Support messages

If you contact support through the application, we store the topic, priority, the message you wrote, and its status while it is being handled.

Notification and email records

We store your notification preferences, a record of notifications we sent you, and delivery events reported back by our email provider — for example whether a message was delivered or bounced.

Operator activity records

Actions taken by our operators on an account through the internal admin console are recorded, including who performed them and which account they affected. This is an audit trail: it is what allows a sensitive action, such as a deletion, to be accounted for afterwards.

Cookies and browser storage

This marketing site sets no cookies and uses no third-party analytics or tracking scripts.

It does count page views, using a small script of our own. What that script sends is a random identifier generated in your browser for the current tab, which page you are on, and any campaign parameters already present in the address bar. It does not send your browser or device details, the page you came from, or anything else that could identify you, and the identifier is cleared when you close the tab.

We do not store your IP address for this. Our server reads it, uses it once to work out what kind of network the visit came from — a home connection, a mobile network, or a datacentre — and records only that category and the name of the network operator. The address itself is never written to our database or our logs. These counts are deleted after 180 days.

The signed-in application stores your session in your browser's local and session storage, so that you stay signed in between page loads and parts of the interface remember their state. Clearing your browser's storage for the site signs you out.

We do not use advertising cookies or cross-site tracking.

4. How we use information

We use the information described above to:

• create and authenticate your account;
• run the reputation campaign you have asked us to run — produce content, publish it, and track rankings;
• take payment, manage your subscription and trial, and issue billing records through our payment provider;
• send service email, including email verification;
• respond to support requests;
• operate, secure, debug and improve the service, and keep an audit trail of operator actions.

We do not sell personal information, and we do not use the contents of your campaign to run advertising.

5. Service providers

The service is built on third-party providers, and running it means some information is processed by them. These are the providers involved and what each one handles:

Auth0 (authentication)

Holds your sign-in credential and issues the tokens that let you use the application. Your password is held by Auth0, not by us.

Stripe (payments)

Processes payments and holds card details, customer records and invoices. We hold only the identifiers and subscription state described above.

Resend (email delivery)

Delivers service email — verification, notifications and similar — and reports delivery outcomes back to us.

OpenRouter (content generation)

Provides the language models used to draft campaign content. Campaign details you supply may be sent as part of a request to generate that content.

SerpAPI (search results)

Retrieves search-result data used to track how your keywords and target results rank.

Publishing platform

Hosts the pages the service publishes on your behalf. Published pages are public by design — that is the point of publishing them.

Cloudflare (network)

Serves and protects traffic to our domains, and therefore handles requests made to the site.

Each of these providers operates under its own privacy terms. We may also disclose information where we are legally required to do so.

6. How information is stored

Your account, campaign and billing records are stored in a PostgreSQL database on server infrastructure operated for the service, and are backed up. Content generated for your campaign is stored alongside it. Published pages live on the publishing platform described above.

Traffic to the site and application is served over HTTPS.

7. How long we keep information

While your account is active

We keep your account and campaign records for as long as the account exists, because they are what the service operates on.

After you cancel a subscription

Cancelling stops billing and stops campaign work. It is not a deletion: your campaign, ranking history and published content are retained for 365 days from cancellation, so that an account can be resumed. This period is enforced by the application.

After deletion

When an account is deleted, the records listed in Data Deletion Request are removed. A record that the deletion was requested and carried out is retained as an audit trail, along with the email address the request concerned.

Payment records

Invoices and charges are retained by Stripe as financial records, and are not removed when an account is deleted.

8. Deleting your account and data

You can ask us to delete your account and personal data. Because deletion reaches systems beyond our own database — the payment provider, the authentication provider and already-published pages — it is handled as a request rather than a button, and there are parts of it we cannot perform on another company's system.

The Data Deletion Request page sets out exactly how to make the request, what is removed, what is not, and why.

9. Your choices

• Your account details. You can view and update your name and profile details in the application's settings.
• Campaign information. You can change the keywords, targets and content direction of a campaign from the dashboard.
• Notifications. You can change your notification preferences in settings. Some email is operational — email verification, billing and security notices — and is sent regardless.
• Billing. You can manage or cancel your subscription and see your invoices through the Stripe billing portal, reached from the application's settings.
• Deletion. See Data Deletion Request.
• Access. To ask what we hold about you, contact us at the address below.

10. Security

We take measures to protect the service and the information in it: traffic is served over HTTPS, credentials and API keys are held as secrets rather than in application code or in this repository, authentication is delegated to a dedicated provider rather than storing passwords ourselves, card details are handled by Stripe on its own hosted pages, and operator access to customer accounts is restricted and recorded in an audit trail.

No service can promise that a breach is impossible. If you believe an account has been compromised, contact us at the address below.

11. Changes to this policy

We may update this policy as the service changes. When we do, we will update the “last updated” date at the top of this page. Material changes will be communicated to account holders by email or through the application.

12. Contact us

For any question about this policy or about the personal information we hold, contact us at support@onlinereputation.top, or write to us at the address in section 1.

← Back to the site