Privacy Policy

1. Introduction

ReplyBrew ("we," "us," or "our") is operated by HelixForge. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at replybrew.com and our Chrome extension (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information you provide directly to us, including:

Account Information: When you create an account, we collect your email address and password, or your Google account profile information if you sign in with Google. You may also provide your business name and business context description.

Review Data: When you use the Service to generate replies, we process the review text, star rating, and reviewer name you provide. This data is stored in your reply history so you can access it later.

Payment Information: If you subscribe to our Pro plan, payment processing is handled by Stripe. We store your Stripe customer ID and subscription ID but do not store your credit card number or full payment details.

Usage Data: We track how many replies you have generated in a given billing period to enforce plan limits.

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve the Service, including generating AI-powered review replies tailored to your business context and tone preferences. We also use your information to process transactions and manage your subscription, communicate with you about the Service, and enforce our terms and policies.

4. AI Processing

ReplyBrew uses Anthropic's Claude API to generate review replies. When you generate a reply, the review text, your tone preferences, and your business context are sent to Anthropic's API for processing. We do not use your data to train AI models. Anthropic's data handling is governed by their own privacy policy and API terms.

5. Data Storage and Security

Your data is stored securely using Supabase, which provides encrypted storage and row-level security. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use the following third-party services to operate ReplyBrew: Supabase for authentication and data storage, Stripe for payment processing, Anthropic (Claude API) for AI reply generation, and Vercel for hosting. Each of these services has its own privacy policy governing their handling of your data.

7. Chrome Extension

The ReplyBrew Chrome extension accesses Google Business Profile pages to detect reviews and enable in-page reply generation. The extension only activates on business.google.com and replybrew.com domains. It stores your session credentials and preferences locally using Chrome's storage API. The extension does not collect browsing history or access data from any other websites.

8. Data Retention

We retain your account information and reply history for as long as your account is active. If you delete your account, we will delete your personal information and reply history within 30 days, except where we are required to retain it for legal or regulatory reasons.

9. Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings. You may also request a copy of your data or ask us to stop processing your information by contacting us at support@replybrew.com. If you are located in the European Economic Area, you have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

10. Cookies

We use essential cookies to maintain your authentication session. We do not use advertising cookies or third-party tracking cookies. The Chrome extension uses Chrome's local storage API to persist your preferences and session.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@replybrew.com.