ReplyPlate is run by its founder. This policy covers the ReplyPlate Chrome extension, this website (replyplate.com) and the paste-a-review web page at /app.
What the extension reads
- Only the review text, star rating and reviewer first name that are visible on the page you're viewing, and only after you click Plate reply on that review.
- No background crawling. It doesn't read other tabs or other pages.
- Reviews are written by other people. Their text and first names are their personal data, and you can already see them on the page. We use them only to write the draft you asked for, when you click.
- It never posts, and it never clicks Google's buttons. Insert fills the reply box; you press Post yourself.
Permissions the extension asks for
- Page access on Google Business Profile (business.google.com), Google Maps (google.com/maps) and Google Search (google.com/search) only, so it can show the button and read the review you click.
- Storage, to keep your house voice, business name, default tone and install id in your browser, and, only if you switch it on, your last few drafts (kept in your browser only, never sent anywhere, clearable in one click).
- Network access to replyplate.com, to ask for a draft after you click. Beta builds up to 0.3.4 use replyplate.vercel.app, the same server under its old address. (A developer-only setting in the extension can ask Chrome for permission to talk to localhost. It stays off unless you turn it on.)
What we send to our server
For each draft request:
- the review text,
- the star rating,
- the reviewer first name (if shown on the page),
- your business name and house voice (if you've set them),
- a one-line note about what you want that reply to say (only if you type one in the draft panel).
The request also carries your random install id and, if you use one, your license key, so we can count replies and check your plan. Pasting a review into the web page at /app sends the same things.
What we pass to OpenAI
The review (and the details above) is forwarded to OpenAI to write the draft. What you send for a draft goes to OpenAI's API to write it, under OpenAI's API data terms. OpenAI says it doesn't train on API data by default, and may keep inputs and outputs for up to 30 days to monitor for abuse (longer only if the law requires it). We don't control OpenAI's retention. See OpenAI's data controls page and OpenAI's privacy page for the current terms.
What we do not store
ReplyPlate does not store review text, drafts, names, house voice or your draft notes in any database, and does not write them to logs.
What we do store
- A random install id.
- A per-month usage count for that install (or for your license, if you have one).
- A salted, one-way hash of your IP address for abuse limits. We never store the raw IP address.
- A license key and the install ids bound to it, if you have a license.
- Waitlist emails, only if you submit one (and tick the consent box). Kept until removed on request.
- Problem reports, only if you click send. A report from the extension carries structural information about the page (tag names, roles, counts), never review text, names or business names, plus an optional note. A message you send from the support form is stored as a report too: whatever you type, including a name and email only if you choose to add them. Please don't include customer details.
Our host
This site runs on Vercel. Vercel keeps standard request logs (IP address, path, timestamp). We don't read request bodies and we don't log them.
This website
No analytics, no ad tech, no third-party scripts, no cookies. The paste-a-review page keeps a few things in your browser's local storage (not cookies, and never sent anywhere except as described above): a random install id (rp_install) and, if you press Save, your house voice and business name. You can clear them in your browser settings.
How long we keep things
- Reviews, drafts, names, house voice: not kept by us (see above).
- IP hash: kept for the current month plus a few days. Short-term rate-limit counters last minutes to hours.
- Usage counts (the install id sits inside the counter's name): until a few days after the end of that month. A new month starts a new counter.
- License records: the key, its plan and the install ids bound to it are kept until the license is revoked or you ask us to delete them. Deactivating a license in the extension removes that install's binding.
- Waitlist emails: until removed on request (ask on the support page).
- Problem reports: kept in a list capped at the newest 500, until we review and clear them.
Your choices
- Take back consent in the extension's settings. It stops reading reviews and sending anything.
- Deactivate your license in the extension's settings to free its install slot.
- Uninstall the extension to delete its local data (house voice, install id) from your browser.
- Ask us to delete or unsubscribe. To remove your waitlist email, or the records for an install id, send a request through the support page with the email or install id. Because we hold no names, we can only match what you give us.
Free plan limits
The free plan allows 5 replies a month per install. To enforce it we keep the install id and monthly count above. Without a valid install id, requests fall into a stricter shared bucket keyed by the salted IP hash.
Children
ReplyPlate is a tool for business owners and isn't directed at children. We don't knowingly collect information from them.
Changes
If we change this policy, we'll update this page and its effective date.
Contact
Email support@replyplate.com, or use the support form.