AutoMyReply Privacy Policy

1. Information we collect

A) Account and identity data

• Email address
• Display name (if provided)
• Avatar/profile image URL (if provided)
• Google OAuth identity information (e.g., provider, provider user id, provider email)
• Team membership and role information

B) Business/location data (Google Business Profile)

If you connect Google Business Profile, we may collect and store:

• Google location identifiers
• Business/location name, address, phone, website
• Geographic and timezone fields (city, region, country, coordinates, timezone)
• Location configuration you provide (brand voice, sentiment guidance, language, signature)
• Sync metadata (timestamps, status, errors)

C) Reviews and reply data

We may collect and store:

• Review identifiers, ratings, reviewer name/profile URL (if provided by Google)
• Review text, date, and review URL
• Images/links associated with reviews (as URLs/JSON)
• Reply status and timestamps
• Draft replies and final reply text (including draft history where enabled)
• Reply posting attempt logs (success/failure, error messages, request/response payloads)

D) Competitor and insights data

We may collect and store:

• Competitor business details (name, address, category, rating, review count, IDs like place_id/business_id/data_id)
• Competitor reviews and associated metadata (from providers such as SerpAPI)
• Generated insights and analytics outputs (stored as JSON), including model and prompt version metadata

E) Billing and usage data

If you subscribe, we may store:

• Stripe customer and subscription IDs
• Subscription tier/status and period dates

We do not store full payment card numbers. Payments are processed by our payment processor (e.g., Stripe).

We also store usage records such as:

• Credit balances and credit ledger transactions
• Audit logs (actions taken in the Service, with timestamps and metadata)

F) Technical data

We may collect:

• Log data (IP address, device/browser information, timestamps)
• Security and fraud-prevention signals
• Cookies or similar technologies (for authentication and analytics, if enabled)

2. How we use information

We use information to:

• Provide and operate the Service (sync reviews, generate drafts, show analytics)
• Authenticate users and manage team access
• Maintain security, prevent abuse, and enforce our Terms
• Process billing and manage subscriptions/credits
• Improve and debug the Service (including performance monitoring)
• Communicate with you (support, important notices)

3. Legal bases (Canada/Ontario)

We process information primarily because:

• it is necessary to provide the Service you request,
• you consent (e.g., connecting Google OAuth),
• it is needed for legitimate interests (security, fraud prevention, product improvement),
• it is required to comply with legal obligations (tax, accounting).

4. How we share information

We share information only as needed to operate the Service, including with:

• Google (to access Google Business Profile APIs under your authorization)
• Payment processors (e.g., Stripe) for billing
• Service providers (hosting, databases, error monitoring, analytics)
• Data providers (e.g., SerpAPI) for competitor information you request

We may also share information:

• to comply with law, court orders, or lawful requests,
• to protect rights, safety, and security of the Service, our users, or the public,
• in connection with a business transfer (merger, acquisition, or sale of assets).

We do not sell your personal information.

5. Google API data (important)

If you connect a Google account, we access Google Business Profile data and reviews under the permissions you grant.

We use Google API data only to provide features you request (review sync, draft reply generation, posting replies where enabled, analytics/insights). We do not use Google API data to build advertising profiles, to sell to third parties, or for unrelated purposes.

You can revoke the Service's access at any time from your Google Account settings. After revocation, some previously stored data may remain in our system until deleted per Section 8.

6. Data retention

We retain information as long as needed to:

• provide the Service,
• maintain records (billing, security, audit),
• comply with legal obligations,
• resolve disputes and enforce agreements.

Retention periods vary by data type. For example, billing records may be retained for legal/tax requirements even after account deletion.

7. Security

We use reasonable administrative, technical, and organizational safeguards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your information.

At minimum, you can:

• access and update your account information within the Service (where available),
• request account/data deletion by emailing automyreply@gmail.com,
• revoke Google access in your Google Account settings.

When you request deletion, we will delete or de-identify personal data where reasonably possible, except where we must retain it for legal, security, or fraud-prevention purposes.

9. Children's privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children.

10. International data transfers

Your information may be processed in countries other than where you live, depending on our hosting and service providers. We take steps designed to protect data in transit and at rest.

11. Changes to this Privacy Policy

We may update this Privacy Policy. If changes are material, we will provide reasonable notice (e.g., in-product notice or email). The effective date above will be updated.

12. Contact

Privacy questions or requests: automyreply@gmail.com