Last updated: August 8, 2026
MedRepLabs ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our field sales productivity platform, including the mobile app and web dashboard.
We collect information you provide directly: account registration details (name, email, company), business card data scanned through the app (contact names, titles, phone numbers, email addresses, practice information), visit notes and outreach history, and content you upload to the content library. We also collect usage data such as login times, features used, and device information.
We use your information to provide and improve the Service, generate AI-powered email drafts and contact summaries, match contacts to NPI provider records, sync data between the mobile app and web dashboard, send transactional emails (account verification, password resets, team invitations), and communicate service updates.
Business card images are sent to Anthropic's Claude API for text extraction. Document files uploaded to the content library are processed by Claude for summarization. Contact information may be sent to Claude to generate personalized email drafts. Anthropic's data handling practices are governed by their privacy policy. We do not use your data to train AI models.
All data is stored in Supabase, a secure cloud database provider. Data is encrypted at rest and in transit. Each company's data is logically isolated using row-level security. We do not store business card images after processing — only the extracted text is retained.
We do not sell your data. We share data only with service providers necessary to operate the Service: Supabase (database), Anthropic (AI processing), Vercel (hosting), Stripe (payment processing), and Resend (email delivery). We may disclose data if required by law.
MedRepLabs is designed for managing contacts of healthcare professionals (physicians, nurses, office staff), not patient data. Do not enter protected health information (PHI) into the Service. We are not a HIPAA Business Associate and do not sign Business Associate Agreements.
We retain your data for as long as your account is active. If you cancel your subscription, data is retained for 30 days and then permanently deleted. You may request immediate deletion by contacting us.
You have the right to access, correct, or delete your personal data. You may export your contacts at any time using the CSV export feature. To request account deletion or a full data export, contact us at hello@medreplabs.com.
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level database security, rate limiting, and access controls. No system is 100% secure; please use a strong password and keep your credentials private.
The Service is not directed to children under 18. We do not knowingly collect information from children.
We may update this Privacy Policy periodically. We will notify you of material changes by email or in-app notice. Continued use after changes constitutes acceptance.
For privacy questions or data requests, contact us at hello@medreplabs.com.