Privacy Policy

ReplyHub (“we”, “us”) helps businesses reply to their Google reviews. This policy explains what we collect, why, and the choices you have. Questions: hello@replyhub.site.

What we collect

• Account details: your email address and the business profile you enter (name, type, tone, sign-off, contact line).
• Google Business Profile data you authorize: your business locations, the public reviews on them (reviewer display name, rating, text, dates) and existing replies.
• An encrypted Google authorization token so we can read reviews and post the replies you approve.
• Billing status from Stripe (plan, subscription status). Card details are handled by Stripe and never reach us.
• Basic technical logs (IP address, request times) for security and abuse prevention.

How we use Google data

We use the Google Business Profile access you grant (scope business.manage) only to list your locations, read reviews, and post replies on your behalf according to the settings you choose. We do not sell Google data, use it for advertising, or use it to train AI models. ReplyHub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We share data only with providers that help us run ReplyHub, under contracts that limit their use of it:

• Supabase (database and sign-in)
• Anthropic (writes reply drafts from the review text and your brand settings)
• Stripe (payments)
• Resend (email delivery)
• Hostinger (servers)

Retention and deletion

We keep your data while your account is active. Disconnect Google anytime in Settings, which deletes the stored authorization token; you can also revoke access from your Google account. To delete your account and data, email us and we will do so within 30 days, except records we must keep for legal or tax reasons.

Security

Data is encrypted in transit. Google tokens are additionally encrypted at rest. Access to each business's data is restricted to its owner by database-level row security.

Your rights

Depending on where you live (for example under the CCPA or GDPR), you may have rights to access, correct, delete or export your data. Email us to use them.

Changes

We will post updates here and change the date above. Material changes will be emailed to account owners.