Privacy Policy

OwnerReply.ai ("OwnerReply," "we," "us," or "our") provides a software platform that helps businesses monitor and respond to customer reviews across Google, Facebook, Trustpilot, the Apple App Store, and Google Play. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using OwnerReply.ai (the "Service") you agree to the practices described here.

1. Information We Collect

Account information

When you create an account we collect your name, email address, business name, and password (stored only as a salted hash). If you sign in with Google or Facebook, we receive your basic profile information (name, email, and profile identifier) from that provider.

Connected platform data

When you connect a review platform, we access only the data needed to provide the Service. Depending on the platform this may include:

• Your business locations and profile metadata
• Customer reviews, ratings, reviewer display names, and review timestamps
• Existing owner replies and reply status
• OAuth access and refresh tokens used to connect on your behalf

Payment information

Payments are processed by Stripe. We do not store full card numbers. We retain only a customer identifier and subscription status returned by Stripe.

Usage data

We collect standard log and device data such as IP address, browser type, and pages viewed in order to operate, secure, and improve the Service.

2. How We Use Your Information

• To sync, display, and let you manage your reviews in one dashboard
• To generate suggested AI responses to your reviews
• To post your approved replies back to the connected platform
• To notify you about new reviews and account activity
• To process payments and manage your subscription
• To provide support, prevent abuse, and comply with legal obligations

3. Google User Data & Limited Use Disclosure

OwnerReply.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We access your Google Business Profile data (locations and reviews) solely to provide and improve the review-management features you request.
• We do not transfer this data to others except as needed to provide the Service, to comply with applicable law, or as part of a merger or acquisition.
• We do not use Google user data for advertising, and we do not sell it.
• We do not allow humans to read your Google user data unless we have your explicit consent for specific data, it is necessary for security or to comply with law, or the data has been aggregated and anonymized.

Review text may be sent to our AI provider (Anthropic) strictly to generate a suggested reply at your request. It is not used to train third-party models.

4. How We Share Information

We share data only with service providers that help us operate the platform:

• Anthropic — to generate AI-suggested review responses
• Stripe — to process subscription payments
• Resend — to send transactional and notification emails
• Our hosting and database providers — to run the Service
• The review platforms you connect (Google, Facebook, Trustpilot, Google Play) — to post replies you approve

We do not sell your personal information or your connected platform data.

5. Data Retention

We retain account data for as long as your account is active. Raw review data synced from connected platforms is retained for up to 30 days for caching and processing, after which it is refreshed or removed. When you disconnect a platform or delete your account, we delete the associated tokens and synced review data, except where we are required to retain limited records to comply with legal obligations.

6. Your Rights & Choices

• Disconnect a platform at any time from your dashboard, which revokes our access tokens for that platform.
• Access, correct, or delete your personal data by contacting us.
• Delete your account and all associated synced data by emailing privacy@ownerreply.ai.
• Revoke Google access directly at myaccount.google.com/permissions.

7. Data Security

We protect your information using encryption in transit (TLS), encrypted storage for OAuth tokens, access controls, and the principle of least privilege. No method of transmission or storage is completely secure, but we work to protect your data and promptly address vulnerabilities.

8. Children's Privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, notify you by email or in-app.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at privacy@ownerreply.ai.