Privacy Policy

ReplyPilot is a product of IDM VALLEY Pvt. Ltd. ("we", "us"), Faridabad, Haryana, India. This policy explains what we collect when you use ReplyPilot, what we do with it, and the choices you have. Questions: hi@idmvalley.com.

What we collect

• Your account: name, email address, business name, and a hashed password (we never store your password itself).
• What you enter: brand voice, business facts, saved replies, rules, tags and internal notes.
• From Google, when you connect an account: your Google account's unique ID and email address, the locations you manage, and the reviews on those locations (reviewer name and profile photo link, star rating, text, date, and any reply already posted).
• Replies: the replies you or your rules send, and when.
• Technical data: a session cookie that keeps you signed in, and basic server logs.

How we use Google user data

We ask for one Google permission: the Business Profile scope, which lets ReplyPilot read the reviews of the locations you choose and post replies to them. We use that access only to show those reviews in your inbox and to send replies you, or the rules you set up, ask us to send. We never edit or delete your Business Profile information, photos or reviews.

ReplyPilot's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or allow people to read it except when you ask for support, when needed for security or to comply with law, or when it is aggregated and anonymised.

Access tokens that Google gives us are encrypted at rest. You can disconnect an account at any time in Accounts, and you can also revoke access from your Google account's security settings.

AI processing (only if you turn it on)

AI replies are off by default. While off, no review text is sent to any AI service. If you switch on "Use AI to write custom replies", the text of each new review, the reviewer's name, the star rating and the brand voice and business facts you wrote are sent to our AI provider, Anthropic, solely to analyse the review and draft a reply. You can switch it off at any time.

Who else sees your data

• Google, because that is where your reviews live and where replies are posted.
• Our AI provider (Anthropic), only if you turn AI on, as described above.
• Hosting and infrastructure providers that run the service for us under confidentiality obligations.

We do not sell your data.

How long we keep it

We keep your data while your account is active. When you disconnect an account in the app, we stop accessing it and delete its stored access, its locations or channels, and the reviews and comments we synced from it. Replies already posted stay on the platform. When you ask us to delete your workspace, we delete your account, connections, reviews, replies, rules and notes.

Your choices

• Disconnect any account, pause all automatic replies, or turn AI off, at any time in the app.
• Ask us to access, correct or delete your data by emailing hi@idmvalley.com. We reply within a few working days.

Security

Passwords are hashed, Google tokens are encrypted at rest, and sessions use secure, HTTP-only cookies. No system is perfectly secure, so please use a strong, unique password.

Changes

If we change this policy in a way that matters, we will update the date above and tell you in the app or by email.

Contact

IDM VALLEY Pvt. Ltd., Faridabad, Haryana, India. Email hi@idmvalley.com or call +91 98910 54016.