Rplyr← Back to home

Privacy Policy

How we handle your data

Last updated: May 26, 2026

Draft notice. This is a pre-launch placeholder. It will be replaced with a lawyer-reviewed policy before the product opens to paying customers.

Who we are

Rplyr (“we”, “us”) helps small business owners reply to Google reviews using AI-generated drafts. This policy explains what we collect and why.

What we collect

  • Account info. Email address and password (hashed) when you sign up. If you use Google Sign-In, your Google account email.
  • Business profile data. Once you connect a Google Business Profile, we store the profile identifier and OAuth tokens needed to fetch reviews and post replies on your behalf.
  • Review content. Public reviews left by your customers — reviewer name, rating, review text, posted-at timestamp. We pull these from Google using your connection.
  • Generated drafts. AI-generated reply drafts and any edits you make before approving them.
  • Payment info. Handled by Stripe; we never see or store full card numbers.
  • Waitlist info. If you joined the pre-launch waitlist: email, optionally business type, city, and referral source.

How we use it

  • Operate the service — fetch reviews, generate drafts, post approved replies.
  • Authenticate you and keep your account secure.
  • Email you about your account, new reviews, and service updates.
  • Improve the product. We do not sell or share your data with advertisers.

Third parties we use

  • Supabase — database, authentication, and hosting.
  • Anthropic — we send review text to Anthropic's API to generate reply drafts. Anthropic does not train on this data under its API terms.
  • Google — we use Google's OAuth and Business Profile APIs to read reviews and post replies on your behalf.
  • Stripe — payment processing.

Your rights

You can request a copy of your data, correct it, or delete your account at any time by emailing hello@rplyr.co. Deleting your account removes your business profile connections, reviews, drafts, and account record.

Data retention

We keep your data for as long as your account is active. When you delete your account, your data is removed within 30 days, except where we're legally required to retain billing records.

Cookies

We use cookies set by Supabase to keep you signed in. We do not use third-party advertising or tracking cookies.

Changes

If we change this policy in a way that affects how we handle your data, we'll email you before the change takes effect.

Contact

Questions about this policy? Email hello@rplyr.co.

← Back to home