Privacy Policy
Last updated October 2026
ReplyWell ("we", "us") provides a service that drafts and posts replies to online reviews for businesses. This policy explains what information we collect, how we use it, and the choices you have. Contact: [email protected].
Information we collect
- Account and contact information, such as your name, business name, email address and phone number.
- Google Business Profile data that you authorise through Google OAuth: business location details, reviews, and existing replies.
- Voice profile and preferences that you give us during onboarding.
- Billing information, which our payment processor handles. We do not store full card numbers.
How we use Google user data
We use data obtained through Google APIs only to provide the features you have turned on: reading your reviews, drafting replies, posting replies that you approved or set to auto-post, and preparing summaries for you. We do not sell this data, use it for advertising, or transfer it except as needed to provide the service, to comply with law, or as part of a merger or acquisition with notice to you. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
We post replies automatically only with your prior, specific and express consent, and only for the review types you choose.
AI processing
Review text and your voice profile may be processed by AI service providers to generate draft replies. These providers act on our instructions and are not permitted to use the data to train their models.
Retention
We keep content retrieved from Google APIs for no longer than 30 days unless it is refreshed, and we delete it promptly after you disconnect. You can ask us to delete your account data at any time.
Revoking access
You can revoke ReplyWell's access at any time at myaccount.google.com/permissions or by emailing us. We complete offboarding within 7 business days.
Sharing
We share data only with service providers that help us run ReplyWell, such as hosting, email, payment and AI providers, and when the law requires it. Free-audit form submissions are processed by our forms provider, FormSubmit (formsubmit.co), which delivers them to us by email and may use Google reCAPTCHA to block spam.
Security
We use encryption in transit, access controls and least-privilege access to protect your data.
Your rights
Depending on where you live (including under the UK GDPR, the Australian Privacy Act and US state privacy laws), you may have the right to access, correct, delete or export your data, or to object to some processing. To make a request, email [email protected].
Changes
If we make material changes to this policy, we will notify you by email.