Legal
Privacy Policy
Last updated: March 2026
1. Information We Collect
When you create a Replizer account, we collect your name, username, email address, and phone number. Payment processing is handled entirely by Stripe — Replizer never collects, stores, or has access to your credit card or billing information. When you connect a review platform, you authorize Replizer through that platform’s own login page using OAuth. Replizer never receives, stores, or has access to your platform passwords. We receive only an OAuth access token, which is encrypted and stored securely. We also collect the review data associated with your connected business listings, including review text, ratings, and reviewer information provided by the platform.
2. How We Use Your Information
We use your information solely to provide the Replizer service — monitoring your reviews, generating reply suggestions, and posting approved replies on your behalf. We do not sell your personal information to third parties. We do not use your review data to train AI models for any purpose other than generating replies for your business.
3. Data Storage and Security
All data is stored using industry-standard encryption at rest and in transit. We use Supabase for database storage and Stripe for payment processing. Payment card data is never stored on Replizer servers — it is handled entirely by Stripe, which is PCI-DSS compliant. OAuth tokens are encrypted at rest and scoped only to the permissions you authorized. Replizer never stores your platform usernames or passwords. Your Replizer account password is hashed using bcrypt with a unique salt — it cannot be read by anyone, including Replizer staff.
4. Third-Party Services
Replizer integrates with third-party review platforms (Google, Trustpilot, Yelp, and others) on your behalf. Your use of those platforms remains subject to their own privacy policies and terms of service. We also use OpenAI’s API to generate reply suggestions. Review text is sent to OpenAI’s API for this purpose and is subject to OpenAI’s data usage policies.
5. Data Retention
We retain your account data for as long as your account is active. If you cancel your account, your data is deleted within 30 days. Review data imported from connected platforms is retained only while your account is active and deleted alongside your account upon cancellation.
6. Your Rights
You may request a copy of your data, correction of inaccurate data, or deletion of your account at any time by emailing contact@replizer.com. For users in the European Economic Area, you have additional rights under GDPR including the right to data portability and the right to object to processing.
7. Cookies
We use strictly necessary cookies to maintain your login session. We do not use advertising cookies or sell cookie data to third parties. You may disable cookies in your browser settings, but doing so will prevent you from staying logged in.
8. Contact
Questions about this policy? Email us at contact@replizer.com.