Privacy policy

Who we are

ReplyCrew is a service that answers online reviews and manages messages on behalf of local trade businesses. This policy explains what data we handle, why, and what we do not do with it.

What we collect

• •Account details you give us: your name, business name, email address, phone number, trade and location.
• •Google account data you authorise: your email address and basic profile, used to identify your account.
• •Google Business Profile data you authorise: your business locations, the reviews left on them, and the replies posted to those reviews.
• •Service records: the replies we generate, whether each one was posted or held, and when.
• •Billing records: handled by Stripe. We never see or store your card details.

How we use Google user data

When you sign in with Google and grant access to your Business Profile, we use that access for one purpose: to run the service you are paying for. Specifically:

• •We read your business locations so you can choose which ones we manage.
• •We read reviews left on those locations so we can write replies to them.
• •We post replies to those reviews on your behalf, with your explicit consent, and we read the status of those replies so we can tell whether Google published them.
• •We read your email address and basic Google profile solely to identify your ReplyCrew account.

What we never do with your Google data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• •We do not sell it, rent it, or share it with advertisers or data brokers.
• •We do not use it to train machine learning models.
• •We do not use it for advertising of any kind.
• •We do not read, access or store anything beyond the business locations you choose to connect.
• •We do not ask for, see, or store your Google password. Access is granted through Google's own permission screen.

How we store and protect it

• •Access tokens are encrypted before they are stored, and are only decrypted when running the service for you.
• •Your data is separated from every other customer's, and every request is scoped to your account.
• •Access to production systems is limited to people who need it to operate the service.

Who else sees it

We use a small number of service providers to run ReplyCrew: hosting and database infrastructure, payment processing (Stripe), and email delivery. They process data only to provide those services to us.

Where a reply is generated using an external AI provider rather than our own infrastructure, the review text and your voice settings are sent to that provider solely to produce the reply. It is not used to train their models.

We may disclose information if we are legally required to.

Revoking access and deleting your data

You can disconnect ReplyCrew from your Google account at any time, from your Google account's security settings or from within ReplyCrew. Revoking access stops the service immediately.

You can ask us to delete your data at any time by emailing us. When you cancel, we delete your access tokens straight away and remove your review data on a scheduled basis afterwards.

Cookies

We use a single cookie to keep you signed in. We do not use advertising or tracking cookies.

Changes

If this policy changes in a way that affects how we handle your data, we will tell you before it takes effect.