Replify AI

Privacy Policy

Effective September 30, 2026

Replify AI ("we", "us") helps businesses read and reply to Google reviews for the locations they manage. This policy explains what data we collect, how we use it, who we share it with and how you can have it deleted.

1. Data we collect

Account data

  • Your name, email address and a hashed password, or your Google profile name, email and picture if you sign in with Google.
  • Organization names, member lists, roles and invitations you create.
  • Session data (IP address, browser user agent) to keep you signed in and protect your account.

Google Business Profile data

When an owner or admin connects a Google account, we request the https://www.googleapis.com/auth/business.manage scope and access, through Google's official APIs only:

  • The list of Business Profile accounts and locations the Google account manages (names, addresses, language, verification state).
  • Reviews for those locations (star rating, review text, reviewer display name, timestamps) and existing owner replies, including moderation status.
  • An OAuth refresh token, which we encrypt at rest with AES-256-GCM.

Content you provide

Company profile, location facts, brand voices, restrictions, example replies, uploaded documents, rules, and reply drafts and edits.

2. How we use data

  • To show your reviews, generate reply drafts and — only as your rules or your team instruct — post replies to Google on your behalf.
  • To send you notifications you have enabled (email and in-app).
  • To keep an audit log of syncs, rule matches, approvals and posts so your team can see who did what.
  • To secure the service, prevent abuse and fix problems.

We do not sell personal data and we do not use it for advertising.

3. Google user data and Limited Use

Replify AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Google user data only to provide and improve the user-facing features of Replify AI described above (reading reviews and posting replies you approve or configure).
  • We do not transfer Google user data to third parties except as necessary to provide those features (for example, sending review text to our AI provider to draft a reply), to comply with law, or as part of a merger or acquisition with notice to you.
  • We do not use Google user data for serving advertisements.
  • We do not allow humans to read Google user data unless you give us permission for specific messages (for example, a support request), it is necessary for security purposes, to comply with law, or the data is aggregated and anonymized for internal operations.
  • We do not use Google user data to train generalized AI or machine learning models.

4. Service providers

We share data only with providers that help us run Replify AI:

  • Hosting and database providers (application and Postgres).
  • AI provider (OpenAI for reply drafting, checks and text embeddings of documents you upload). Review text and relevant knowledge are sent to generate replies. These providers process data under their API terms and do not use it to train their models.
  • Email delivery (Resend) for invitations and notifications.
  • File storage (Cloudflare R2) for documents you upload.
  • Background job processing (Inngest).

5. Security

Data is encrypted in transit (TLS). Google refresh tokens are encrypted at rest. Access within an organization is role-based (owner, admin, approver, viewer) and checked on every request.

6. Retention and deletion

  • Disconnecting a Google account revokes and deletes its stored tokens and deletes the accounts, locations, reviews and drafts synced through it.
  • Deleting an organization deletes all of its data, including knowledge, rules, drafts, activity log and uploaded documents.
  • Deleting your user account removes your profile and memberships. Ask us at privacy@replify-ai.app and we will complete the request within 30 days.
  • You can also revoke Replify AI's access at any time from your Google Account permissions page.

Backups are kept for up to 30 days and then overwritten.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us to exercise these rights. Reviewers whose public reviews appear in Replify AI may contact the business that manages the location, or us.

8. Children

Replify AI is a business tool and is not directed to children.

9. Changes

We will post changes here and, for material changes, notify account owners by email.

10. Contact

Questions? Email privacy@replify-ai.app. See also our Terms of Service.