Privacy Policy

1. Who this policy covers

This policy applies to two groups: (a) business customers who create a ReplyHero account, and (b) website visitors who interact with the AI assistant on a customer’s website. We act as a processor of visitor data on behalf of the business that operates the assistant.

2. Information we collect

• Account information: your name, email, business name, and login credentials.
• Business profile & knowledge: details you add so the assistant can answer accurately (services, hours, location, contact info, uploaded documents).
• Visitor conversations & leads: messages exchanged with the assistant and any contact details a visitor chooses to provide (name, phone, email, the service they need).
• Appointment details: times, and the customer name/contact for bookings.
• Google account data: if you connect Google Calendar, we access it as described in Section 4.
• Payment information: handled by our payment processor (Stripe); we do not store full card numbers.
• Usage & technical data: basic logs needed to operate and secure the service.

3. How we use information

• To operate the AI assistant and answer visitor questions using your approved business information.
• To capture leads and notify you, and to schedule appointments.
• To provide, maintain, secure, and improve the service.
• To process billing and provide support.

We do not sell your data or your visitors’ data, and we do not use it for advertising.

4. Google user data (Calendar)

Connecting Google Calendar is optional. If you connect it, you grant ReplyHero access to your calendar so the assistant can (a) read your busy times to avoid offering slots when you are unavailable, and (b) create appointment events when a visitor books.

ReplyHero’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We only use Google Calendar data to provide the scheduling features you enable.
• We do not sell Google user data, use it for advertising, or transfer it to others except as needed to provide the service or as required by law.
• We do not allow humans to read your Google Calendar data unless you explicitly ask us for support, it is required for security or to comply with law, or the data has been aggregated/anonymized.
• You can disconnect Google Calendar at any time from Settings → Scheduling, which deletes the stored access and refresh tokens.

5. How we share information

We share information only with:

• Service providers that help us run ReplyHero — hosting (Vercel), database/auth (Supabase), AI processing (OpenAI), email delivery (Resend), and payments (Stripe) — under agreements that limit their use of the data.
• The business whose assistant a visitor interacts with (visitor leads belong to that business).
• Authorities when required by law.

6. Data retention

We keep account and business data while your account is active. Visitor conversations and leads are retained for the operating business. You may request deletion of your account and associated data by contacting us; Google tokens are deleted immediately when you disconnect Calendar.

7. Security

We use industry-standard measures including encryption in transit, access controls, and tenant isolation so each business’s data is separated from others. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Your choices

• Access, correct, or delete your account data by contacting us.
• Disconnect Google Calendar at any time.
• Website visitors can decline to share contact details and can ask the business to remove their information.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

10. Contact us

Questions or requests? Email support@myreplyhero.com.