Privacy Policy

1. Introduction

ReplyDost ("we", "our", or "us") is an AI-powered Google review response tool built for Indian local businesses. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service at replydost.in.

By using ReplyDost, you agree to the collection and use of information as described in this policy.

2. Information We Collect

We collect the following categories of information:

• Name and email address (from your Google account via OAuth)
• Profile picture (from your Google account)
• Phone number and business details (provided by you during onboarding)
• Business name, business type, and Google Business Profile location ID
• Google Business Profile data — specifically: review text, reviewer name, star rating, review date, and your existing reply (if any) — accessed only with your explicit authorization
• Google OAuth tokens (access token and refresh token) required to act on your behalf

3. How We Use Your Information

• To authenticate you and maintain your session
• To fetch your Google Business Profile reviews and display them in your dashboard
• To generate AI-powered reply suggestions for your reviews
• To publish your approved replies back to Google on your behalf
• To send product updates and notifications (only with your consent)
• To improve our service and fix bugs

We do not use your Google data for any purpose beyond the features described above.

4. Google API Data — Limited Use Disclosure

ReplyDost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we commit to the following with respect to Google user data:

• We only use Google data (reviews, location info, OAuth tokens) to provide the ReplyDost service — fetching reviews and posting replies on your behalf
• We do not transfer your Google data to third parties except as necessary to provide the service (see Data Sharing below)
• We do not use or transfer your Google data for serving advertisements of any kind
• We do not allow humans to read your Google data unless you have given explicit consent, or it is necessary for security purposes, or required by law
• We do not use your Google data to build user profiles for purposes unrelated to the core service

You can revoke ReplyDost's access to your Google account at any time by visiting myaccount.google.com/permissions.

5. Data Storage & Security

Your data is stored in encrypted PostgreSQL databases hosted on Supabase, a SOC 2-compliant infrastructure provider. We use HTTPS for all data in transit. We do not store your Google account password.

OAuth tokens are stored in encrypted form and are used solely to perform actions on your behalf within the ReplyDost service.

6. Data Retention

• Your account data and reviews are retained as long as your account is active
• Upon account deletion, all personal data and OAuth tokens are permanently deleted within 30 days
• Review text sent to AI services is not retained by those services beyond the duration of the API call (subject to each provider's own data retention policy)

7. Data Sharing

We do not sell your personal data. We share data only with the following service providers strictly to operate the service:

• Google LLC — via Google APIs to fetch reviews and post replies (required for core functionality)
• Google (Gemini AI) — review text (not personally identifiable) is sent to generate reply suggestions
• Anthropic (Claude AI) — review text may be sent as a fallback AI provider; no personal information is included
• Supabase — hosts our PostgreSQL database
• Vercel — hosts our web application

All third-party providers are contractually bound to use your data only for the purpose of providing their respective services to us.

8. Your Rights

• Access: Request a copy of all personal data we hold about you
• Deletion: Request deletion of your account and all associated data at any time
• Revocation: Revoke ReplyDost's Google access at any time via myaccount.google.com/permissions
• Correction: Request correction of inaccurate personal data

To exercise any of these rights, email us at hello@replydost.in. We will respond within 30 days.

9. Cookies

We use session cookies to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or data requests, contact us at: hello@replydost.in

ReplyDost is operated by an individual / small business registered in India.