Privacy Policy

1. Introduction

Replona ("we", "our", or "us") operates the Replona platform, including the website at replona.com and the Replona mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide directly

• Account registration data (name, email address, password)
• Business information (business name, locations, Google Business Profile data)
• Payment information (processed by our payment provider — we do not store card details)
• Communications you send us (support requests, contact form submissions)

2.2 Information collected automatically

• Log data (IP address, browser type, pages visited, time and date of visits)
• Device information (hardware model, operating system, unique device identifiers)
• Usage data (features used, actions taken within the Service)
• Cookies and similar tracking technologies

2.3 Information from third parties

• Google Business Profile data (reviews, reply status) via the Google Business Profile API
• Google account profile information (name, email) when you authenticate via Google OAuth

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate AI-powered reply drafts for your Google reviews
• Send push notifications about new reviews
• Process payments and manage your subscription
• Respond to your support requests and communications
• Improve and develop the Service
• Monitor and analyze usage patterns to enhance user experience
• Comply with legal obligations
• Detect, prevent, and address fraud or security issues

4. Google Data Usage

Replona accesses your Google Business Profile data through the official Google Business Profile API. This access is limited to reading reviews and posting reply responses on your behalf. We do not share your Google data with third parties beyond what is necessary to operate the Service.

Your Google OAuth tokens are encrypted at rest using AES-256 encryption. We store only the minimum data required to sync and manage your reviews. You may revoke our access to your Google account at any time through your Google Account settings at myaccount.google.com/permissions.

Replona's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers: Companies that help us operate the Service (cloud hosting, payment processing, analytics) under strict data processing agreements
• AI providers: Review text is sent to OpenAI to generate reply drafts. Please review OpenAI's privacy policy at openai.com/privacy
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to you

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Review data and AI-generated drafts are retained for 12 months after generation to allow you to access your reply history.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by applicable law.

7. Cookies

We use cookies and similar tracking technologies to operate and improve the Service. These include:

• Essential cookies: Required for the Service to function (authentication, session management)
• Analytics cookies: Help us understand how visitors use the website (e.g., Google Analytics). These are only placed with your consent.

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable copy of your data
• Objection: Object to or restrict certain processing of your data
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@replona.com.

9. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest for sensitive credentials, and access controls limiting data access to authorized personnel. However, no method of transmission over the Internet is 100% secure.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at privacy@replona.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date and, where appropriate, by email.

12. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at: