Privacy Policy

• Account information: email address and authentication details from Google OAuth or email/password sign-up.
• Google Business Profile data: with your explicit consent, we read review metadata (author names, star ratings, review text, timestamps) so we can display and reply to reviews on your behalf.
• Generated content: AI-generated reply suggestions and any edits you make before posting.
• Usage data: anonymized error reports and feature usage to help us keep the service reliable.

• To provide the core service: fetching reviews, generating replies, and posting replies you approve.
• To improve reply quality and fix bugs.
• To send essential service updates such as security notices or changes to these terms.
• We do not sell personal data or use it for advertising.

• Google: OAuth and Google Business Profile API calls are made directly through Google's services.
• Lovable Cloud / Supabase: authentication, database, and hosting infrastructure.
• OpenAI / AI gateway: review text and your brand-voice settings may be sent to generate reply suggestions.
• We only share data necessary to operate the feature you are using.

• We use essential cookies to keep you signed in.
• We do not use third-party advertising or tracking cookies.
• Analytics, if enabled, is limited to aggregated, non-identifiable usage patterns.

• Access, correct, or delete your account data at any time from the application settings.
• Revoke Google OAuth access from your Google Account permissions page.
• Request a copy of your data or ask questions by emailing the contact address below.

• We keep your account data for as long as your account is active.
• When you delete your account, we remove identifiable data within 30 days unless legally required to keep it longer.
• Backups may retain encrypted copies for a limited retention period.

Replyflow is built on Lovable Cloud infrastructure. Lovable provides hosting, authentication, and database services; we are responsible for how we configure and use those services. We enable HTTPS, encrypted storage, and OAuth-based access controls. This description is not a security certification or guarantee.

If you have questions about this policy or want to exercise your data rights, email us at privacy@reviewpulse.ai.