Privacy Policy for Reply Fast

Thank you for using Reply Fast ("we," "us," or "our"). This Privacy Policy explains how we collect, use, protect, and handle your personal and non-personal information when you use our website at https://reply-fast.com (the "Website") and our review management services (the "Services").

By accessing or using the Website and Services, you agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our Services.

1. Information We Collect

1.1 Personal Data

We collect the following personal information from you:

• Name: We collect your name to personalize your experience and communicate with you effectively.
• Email Address: We collect your email address for account authentication, service notifications, and important updates regarding your subscription.
• Payment Information: We collect payment details to process your subscription payments securely. However, we do not store your complete payment information on our servers. Payments are processed by Stripe, our trusted third-party payment processor.
• Business Information: We collect information about your business locations, including business names, addresses, and platform URLs (Google, Yelp, TripAdvisor, Facebook) to provide our review management services.
• Review Data: We collect and store reviews from your connected platforms to provide analytics, response generation, and review management features.
• Platform Credentials: For certain platform integrations, we may store OAuth tokens or access credentials to fetch reviews on your behalf.

1.2 Non-Personal Data

We use web cookies and similar technologies to collect non-personal information such as your IP address, browser type, device information, and browsing patterns. This information helps us enhance your browsing experience, analyze usage trends, and improve our Services.

2. Purpose of Data Collection

We collect and use your personal data for the following purposes:

• Service Provision: To provide our review management platform, including fetching reviews from connected platforms, generating AI-powered response drafts, and sending notifications.
• Payment Processing: To process subscription payments and manage billing through Stripe.
• Communication: To send you important service updates, subscription information, and respond to your support requests.
• AI Response Generation: To generate personalized response drafts for your reviews using OpenAI's API, based on your configured brand voice settings.
• Platform Integration: To connect to review platforms (Google, Yelp, TripAdvisor, Facebook) via web scraping (Apify) or OAuth to fetch your business reviews.
• Analytics: To provide you with insights and analytics about your reviews, ratings, and customer sentiment.

3. Data Sharing and Third-Party Services

We share your data with the following trusted third-party service providers to deliver our Services:

• Stripe: For secure payment processing. Stripe handles all payment card information according to PCI-DSS standards. View Stripe's privacy policy at https://stripe.com/privacy.
• Apify: For web scraping services to fetch reviews from platforms like Yelp, TripAdvisor, Google, and Facebook. View Apify's privacy policy at https://apify.com/privacy-policy.
• OpenAI: For AI-powered response generation. Your review content and brand voice settings are sent to OpenAI's API to generate response drafts. View OpenAI's privacy policy at https://openai.com/privacy.
• Resend: For sending email notifications about new reviews, system updates, and account information. View Resend's privacy policy at https://resend.com/legal/privacy-policy.

We do not sell, trade, or rent your personal information to any other third parties. Data is only shared with the service providers listed above as necessary to provide our Services.

4. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. This includes:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Enterprise-grade authentication via Supabase Auth
• Secure session management with httpOnly cookies
• Regular security updates and monitoring
• Secure database access controls

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Services. If you cancel your subscription or delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, regulatory, or accounting purposes.

6. Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request that we delete your personal data, subject to certain legal exceptions.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: You can withdraw your consent to data processing at any time by deleting your account.
• Right to Object: You can object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at info@reply-fast.com. We will respond to your request within 30 days.

7. Children's Privacy

Reply Fast is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at info@reply-fast.com, and we will promptly delete such information.

8. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (Stripe, OpenAI, Apify, Resend) operate. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Website. Cookies are small text files stored on your device that help us remember your preferences and analyze how you use our Services. You can control cookie settings through your browser, but disabling cookies may affect the functionality of our Website.

10. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make significant changes, we will notify you via email at the address associated with your account. The updated policy will be posted on this page with a new "Last Updated" date.

11. Governing Law

This Privacy Policy is governed by the laws of the Federal Republic of Germany. Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts in Regensburg, Germany.

12. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us at:

Email: info@reply-fast.com
Business: Vanessa & Onur Toy GbR
Address: Kumpfmühler Str. 66, 93051 Regensburg, Germany
Phone: 015679 681893

By using Reply Fast, you consent to the terms of this Privacy Policy.