Own your rep credentials and data. Everywhere they go.
RepSource is the leading enterprise credentialing platform that empowers MedTech suppliers to easily manage compliance.
RepSource is the leading enterprise credentialing platform that empowers MedTech suppliers to easily manage compliance.
Introduction
Last modified: August 14, 2025
REPCARDz, LLC, dba RepSource, a Texas limited liability company (“RepSource”) operates the RepSource.com website (“Site”), the OneRepID mobile application (the “App”), the RepSource directory, and the related features, tools offered by RepSource (together with the Site, the “Services”) which may be made available to authorized users under an agreement between RepSource and one of its customers, and any other person which visits the Site or otherwise uses or accesses our Services through the Site or App. Capitalized terms used herein but not defined shall have the meanings outlined in our Terms of Service.
RepSource respects and protects the privacy of users of our Services and of the individuals whose information we store. We maintain strict policies to ensure the privacy of those who use our Services (“End Users”) or those who may just be visiting our Site (“Visitors,” together with End Users, “Users”). This policy (“Privacy Policy”) describes the types of information we may collect from you, the User, and our practices for how we collect, use, maintain, protect, and disclose such information. The way that we collect and use your information depends on the way you access the Services. This Privacy Policy also includes a description of certain rights that you may have over information that we may collect from you. Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we treat it. By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this Privacy Policy. This policy may change from time to time (see How We Retain Your Personal Data and Changes to the Privacy Policy). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the policy periodically for updates.
By using the Services, you agree to this Privacy Policy. If you do not agree with our policies and practices, your choice is to not use our Services.
This policy applies only to information we collect:
It does not apply to information collected by:
We may provide additional or different privacy policies that are specific to certain features, services, or activities.
Summary of Data Collection, Disclosure, and Sale
Here is a short summary of data and the categories of data we have collected, disclosed, and sold over the last twelve (12) months. The rest of this Privacy Policy provides more in-depth information on our privacy practices.
“Personal data” is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, telephone number, home address, or payment information. RepSource may collect the following Personal Data from you:
Some of the information identified above may be considered sensitive data under certain laws. If required under applicable law, we will collect and process sensitive personal data only with your consent. We collect and process the sensitive personal data described in this Privacy Policy, and you hereby consent to such collection and processing described herein. If you choose not to provide or allow us to collect some information, we may not be able to provide you with the requested features, services, or information.
Certain information we process, such as the completion dates of immunizations for credentialing purposes, may constitute health-related or sensitive personal data under applicable laws. We treat such data with heightened safeguards, including encryption in transit and at rest, access controls limited to authorized personnel, and deletion protocols consistent with legal requirements for medical or sensitive data. We will not disclose health-related data to third parties except as necessary to provide the Services, comply with law, or with your explicit consent.
Your bank account information, payment information, and other identifying information may be collected by RepSource or through its third-party vendors, including our payment processors. Your data may be processed, collected, shared, or stored by us and third-party vendors, including but not limited to website service providers, website analytics providers, third-party payment processors, or other service providers we use to conduct business. Such processing, collection, sharing, or storing of data by such third parties is not processed, collected, shared, or stored by RepSource, with the exception of our analytics service providers and other third parties we use to assist in better understanding the Visitors and End Users of our Services.
Non-personal data includes any data that cannot be used on its own to identify, trace, or identify a person. We may collect your IP Address, device information, or location information.
We also collect:
When non-Personal Data you give to us is combined or connected with Personal Data we collect about you so that it directly or indirectly identifies an individual, it will be treated as Personal Data and we will only use it in accordance with this Privacy Policy.
You Provide Information to Us
We collect information about you when you interact with our Services. We collect information about you in three ways:
(1) when you provide it to us directly through an interaction with us; for example, when you register for the Service, live chats, or when you contact us for service or support requests;
(2) through automated collection methods like cookies or log files; and
(3) when we obtain the information through a third party we partner with, such as when we obtain employment information about you from your employer.
Information from our service providers: We may receive information about you from third-party service providers, including third-party providers we engage on behalf of your employer to automate our products and services.
Information from social media sites and other publicly available sources: When you interact or engage with us on social media sites through posts, comments, questions, and other interactions, we may collect such publicly accessible information, including profile information, to allow us to connect with you, improve our products, or better understand user reactions and issues. Please note that once collected, this information may remain with us even if you delete it from the social media sites. We may also add and update information about you from other publicly available sources.
As you navigate through and interact with our Services, we may use automatic data collection technologies to collect information that may include personal data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies including details of your interactions with our Services, such as traffic data, location data, logs, and other communication data, and which resources and Services features that you access and use.
Using automatic collection technologies helps us to improve our Services and to deliver a better and more personalized experience.
The technologies we use for this automatic data collection may include:
To the extent any of these automated technologies are considered a personal data sale, targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt out from use of these automated technologies for such uses by requesting as such to support@RepSource.com. Please note that some Service features may be unavailable as a result.
When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about you or your device. These third parties may include:
These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your personal data, or they may collect information, including personal data, about your online activities over time and across different websites, apps, platforms, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.
We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.
Through cookies, we can collect information that we use to improve the Services, keep count of return visits to our website, authenticate your login credentials, manage multiple instances of the Site in a single browser or App, and keep track of usernames and passwords. If you turn off cookies, your experience on the Services may be impaired, including the lack of quick login processes.
Log Files: We use means through the Services to collect IP addresses, browser types, access times, and physical location. Occasionally, we use this information to improve user interactions with the Site, App, and our Services.
From Business Partners and Service Providers
We may receive personal data about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as occupational health providers, analytics, security and anti-fraud services, background check service providers, and human resource information systems.
We collect and use your Personal Data when we have a legitimate purpose to do so, including the following reasons:
We may use aggregated (anonymized) information about our Users and information that does not identify any individual, without restriction.
We may use aggregated (anonymized) information about our Users and information that does not identify any individual, without restriction.
We do not sell or otherwise disclose Personal Data, specific personal or transactional information to anyone except as described below.
Other Users. When you create a RepSource profile Account, we will share limited information that you have provided for the purpose of being listed with RepSource, and information, such as your phone number, email address, profile picture, job title, and company of employment, may be available to other users. Such information will only be available to registered users of RepSource.
Affiliates and Subsidiaries. We may share your information with entities under common ownership or control with us who will process your information in a manner consistent with this Privacy Policy and subject to appropriate safeguards. Such parent companies, affiliates, or subsidiaries may be located in the United States.
Successors in Interest. We may, for our legitimate interests, share your information with a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, in which Personal Data about our Users is among the assets transferred. You will be notified of any such change by a prominent notice displayed on our Services or by email. Any successor in interest to this Privacy Policy will be bound to the Privacy Policy at the time of transfer.
Law enforcement and other governmental agencies. We may share your information when we believe in good faith that such sharing is reasonably necessary to investigate, prevent, or take action regarding possible illegal activities or to comply with legal process. We may share your personal data to comply with any court order, law, or legal process, including to respond to any government or regulatory request. This may involve the sharing of your information with law enforcement, government agencies, courts, and/or other organizations.
Contractors, Service Providers, and other third parties we use to support our Services. We may, for our legitimate interests, share certain information with contractors, service providers, third-party authenticators, and other third parties we use to support our business and who are bound by contractual obligations to keep Personal Data confidential and use it only for the purposes for which we disclose it to them. Some of the functions that our service providers provide are as follows:
RepSource may, from time to time, make Third-Party Products available to Users. Such Third-Party Products may be subject to their own terms and conditions. If you do not agree to abide by the applicable terms for any such Third-Party Products, then you should not use such Third-Party Products, and you acknowledge that the Services may be limited without such use. You hereby authorize RepSource to disclose information about you, and allow third-party service providers to use and process such information, for the purpose of providing Third-Party Products to Users, whether or not such providers are disclosed or white labeled. Third-Party Products may include but are not limited to (i) Open-Source Components, (ii) AI Features, or (iii) AI Technologies. Nothing in this Privacy Policy limits any rights you may have under, nor grants you any rights that supersede, the terms and conditions of any applicable license terms for any Third-Party Products. A list of Open-Source Components and AI Features which RepSource may make available through the Service and information related thereto is available here.
Some of our current service providers include Amazon Web Services, Google Analytics, QuickBooks, Mixpanel, Tactiq, Open Credentialing Initiative, One37ID (as RepSource is an authorized reseller thereof), and Tableau.
Other. We may disclose personal data that we collect or you provide as described in this Privacy Policy:
RepSource stores User data on our servers, including name and email address. Payment information is processed and stored by our partners or service providers. Personal Data about Users is stored within the United States. If you are using the Services from the European Economic Area or other regions with laws governing data collection and use, please note that you are agreeing to the transfer of your Personal Data to the United States. The United States may have laws which are different, and potentially not as protective, as the laws of your own country. By providing your Personal Data, you consent to any transfer and processing in accordance with this Privacy Policy.
RepSource employs commercially reasonable administrative, physical, technical, electronic, and managerial control procedures and measures designed to safeguard and help prevent unauthorized access to your information (including your personal data) from accidental loss or destruction and unauthorized access, use, alteration, and disclosure. We choose these safeguards based on the sensitivity of the information that we collect, process, and store, and the current state of technology.
However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. While no system can be guaranteed 100% secure, we implement measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. We encourage you to take steps to protect your account credentials and use secure networks when accessing our Services. The safety and security of your information also depends on you, and any transmission of personal data is at your own risk. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.
We will only retain your personal data for as long as is necessary to fulfill the purposes for which it is collected and for as long as reasonably necessary to fulfilll the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm, and the nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed, or deidentified. This length of time may vary according to the nature of your relationship with us. User information will be archived and deleted ninety (90) days after the account has been inactive.
RepSource is not responsible for the privacy policies or other practices employed by websites linked to, or from, our Services, nor the information or content contained therein, and we encourage you to read the privacy statements of any linked third party.
Our Services are not intended for anyone under 18, and we do not knowingly collect Personal Data from children under 18. If you are under 18, do not use or register on the Services, make any purchases, use any of the interactive or public comment features, or provide any information about yourself to us. If we learn we have collected or received Personal Data from a child under 18 without verification of parental consent, we will delete that information. If you believe we have any information from or about a child under 18, please contact us at the email address listed below.
This section describes mechanisms you can use to control certain uses and disclosures of your information and rights you may have under state law, depending on where you live.
If you would like to prevent us from collecting your information completely, you should cease use of our Services. You can also control certain data via these other methods:
Advertising, marketing, cookies, and other tracking technologies choices:
Location data choices:
Depending on your state of residency, you may have certain rights related to your personal data, including:
Important: The exact scope of these rights varies by state. There are also several exceptions where we may not have an obligation to fulfill your request.
To exercise any of these rights, please submit an email to our support email at support@RepSource.com. To appeal a decision regarding a consumer rights request, please submit your appeal in writing to support@repsource.com with the subject line “Consumer Rights Appeal.” Your appeal should include your name, contact information, the original request, our decision, and the reason you believe our decision was incorrect. We will review your appeal and provide a written response within 45 days of receipt. If we require more time (up to an additional 60 days), we will notify you in writing of the reason and the extension period.
If you remain unsatisfied with our response, you may contact your state’s regulatory authority using the information below:
Virginia Residents: Virginia Office of the Attorney General, Consumer Protection Section – Phone: (804) 786-2042, Online Complaint: https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint
Colorado Residents: Colorado Office of the Attorney General, Consumer Protection Section – Phone: (720) 508-6000, Online Complaint: https://coag.gov/file-complaint/
Connecticut Residents: Connecticut Office of the Attorney General, Privacy and Data Security Section – Phone: (860) 808-5318, Online Complaint: https://portal.ct.gov/AG/Complaints/Consumer-Assistance-Form
If your state is not listed, please contact your local Attorney General’s office for guidance.
Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.
Nevada provides its residents with a limited right to opt out of certain personal data sales. Residents who wish to exercise their sale opt-out rights may submit a request to this designated address: support@RepSource.com. However, please know we do not currently sell data triggering that statute’s opt-out requirements.
Under the United States’ California Consumer Privacy Act, Colorado Privacy Act, Connecticut Data Privacy Act, Delaware Personal Data Privacy Act, Florida Data Privacy and Security Act, Iowa Consumer Data Protection Act, Minnesota Consumer Data Privacy Act, Montana Consumer Data Privacy Act, Nebraska Data Privacy Act, New Hampshire Consumer Expectation of Privacy Act, New Jersey Personal Data Privacy Act, Oregon Consumer Privacy Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, and Maryland’s, Indiana’s, Kentucky’s, and Rhode Island’s, other state-specific consumer privacy laws, regarding notice of information collected, residents of these states have statutory data rights. We provide the same control and rights over your data, no matter where you choose to live in the United States. As a user of RepSource, you have the following control over your data:
We acknowledge your right to request access, amendment, or deletion of your data. We also recognize that you have the right to prohibit the sale of your data, but we do not sell data.
You can exercise the rights described above by sending an email or mail to the addresses listed in the Contact section below. Only you or an agent authorized to make a request on your behalf may make a request related to your personal information.
We cannot respond to your request if (i) we cannot verify your identity, or (ii) your request lacks sufficient details to help us handle the request. Any information we provide will only cover the 12-month period preceding the request’s receipt.
We will make our best efforts to respond to your request within forty-five (45) days of its receipt. If we cannot respond in forty-five (45) days, we will inform you, in writing, of the reason for the delay and will respond to your request within ninety (90) days. Any information we provide will only cover the twelve (12)-month period preceding the request’s receipt.
We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We are not obligated to respond to your data requests more than twice in a 12-month period.
Notwithstanding the foregoing, you acknowledge that requests related to your data privacy rights may be subject to separate data handling requirements between us and our Customers, dependent upon how you have access to some or all of our Services, and such requests may need to be routed through that Customer to ensure compliance with contractual and legal obligations. In such cases, we will coordinate with the Customer to fulfill your request to the extent required by applicable law.
We may update this Privacy Policy from time to time, and we will provide notice of any such changes as required by law. It is our policy to post any changes we make to our Privacy Policy on this page. If we make material changes to how we treat our Users’ Personal Data, we will notify you by email to the primary email address specified in your Account or through a prominent notice on our Services. Such changes will be effective when posted. The date the Privacy Policy was last revised is identified at the top of the page. We may email or otherwise communicate reminders about this policy, but you should check our Services periodically to see the current policy and any changes we have made to it. Your continued use of our Services following the posting of any modification to this Privacy Policy shall constitute your acceptance of the amendments to this Privacy Policy. You can choose to discontinue use of the Service if you do not accept any modified version of this Privacy Policy.
Because protecting your privacy is important to us, you may always submit concerns regarding our Privacy Policy on the contact us page. We will attempt to respond to all reasonable concerns and inquiries expeditiously.
If you have any questions or comments about this Privacy Policy, or if you would like to file a request about the data we hold or file a deletion request, please contact us:
By e-mail: support@repsource.com
By telephone: (512)337-9434
By regular mail:
REPCARDz, LLC (dba RepSource)
8200 N. MoPac Expy
Suite 350
Austin, TX 78759
