Privacy Notice

Review Reply operates ReviewReply AI and is the data controller for the personal data described in this notice. This page is maintained by Review Reply and explains what we collect, why, and the choices you have.

Data we collect and why

• Account data (name, email, login credentials or Google sign-in identifier) — to create and secure your account. Legal basis: performance of a contract.
• Business profile and content (business name, industry, location, tone settings, review text you paste, generated replies, templates) — to provide the Service. Legal basis: performance of a contract. Please avoid pasting reviewer personal details you do not need.
• Usage and telemetry (feature usage, reply counts, device identifiers, IP address, error logs) — for security, fraud prevention, plan limits and product improvement. Legal basis: legitimate interests.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Marketing emails — only where you have opted in. Legal basis: consent, withdrawable at any time.

Who we share data with

• Hosting, database, authentication and AI processing providers acting as our processors;
• Paddle, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing;
• Professional advisers such as legal and accounting;
• Authorities where required by law.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

Retention

We keep account and content data for as long as your account is active. After you delete your account or ask us to erase it, data is deleted or anonymised within 90 days, except where we must keep records (for example invoices) to meet legal obligations.

Your rights

Subject to local law you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. Contact us via the support options in your account and we will respond within one month. If you are in the UK/EEA you also have the right to complain to your supervisory authority.

Security

We use appropriate technical and organisational measures including encryption in transit, row-level access controls so each account can only reach its own data, and least-privilege access for administrators. No system is perfectly secure, so please use a strong, unique password.

Cookies

We use essential cookies and local storage to keep you signed in and to run checkout. We do not use advertising cookies. You can clear or block cookies in your browser settings, though essential cookies are required for sign-in to work.