Back to Home
Home Privacy Policy
Legal Document

Privacy Policy

Last updated: 29 July 2026

Privacy Policy

This Privacy Policy describes how ReplyJet ("we", "us", or "our") collects, uses, and protects your personal information when you use our website replyjet.in, mobile application, or any related services (collectively, the "Service").

By using ReplyJet, you agree to the collection and use of information as described in this policy. This policy is governed by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Information We Collect

a) Account Information

  • Full name, email address, and password when you register
  • Business name and Google Business Profile details
  • Phone number (optional, for support purposes)
  • Billing information (processed securely via payment gateway)

b) Google Account Data

When you connect your Google Business Profile, we access:

  • Google Business Profile name, address, and category
  • Customer reviews and ratings on your listings
  • Google Posts published on your behalf
  • Basic Google account profile (name and email) for authentication

We access only the scopes you explicitly authorize via Google OAuth. We do not access your Gmail, Google Drive, or any data outside Google Business Profile.

c) Usage Data

  • Log data: IP address, browser type, pages visited, time and date of visit
  • Device information: device type, operating system, unique device identifiers
  • App usage patterns: features used, clicks, session duration

d) Content You Create

  • AI-generated reply drafts you approve and publish
  • Google Posts you create or schedule via our platform
  • Any custom instructions or prompts you provide to the AI

2. How We Use Your Information

  • To provide the Service: Fetch your Google reviews, generate AI-powered replies, publish posts, and display analytics
  • To authenticate: Verify your identity and manage your account securely
  • To improve our AI: Improve response quality using aggregated, anonymized usage patterns (never your personal data)
  • To send communications: Transactional emails (subscription confirmation, alerts), and product updates if you opt in
  • To process payments: Billing, invoicing, and subscription management
  • To comply with law: Fulfill obligations under Indian law including the DPDP Act 2023

3. Google API Usage & Limited Use Policy

ReplyJet's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

  • We only request Google permissions necessary to operate the Service
  • We do not sell, rent, or share your Google account data with third parties for advertising
  • Google data is used solely to provide and improve ReplyJet features
  • You can revoke Google access at any time from your Google Account permissions page

4. Data Sharing & Third Parties

We do not sell your personal data. We share data only in these limited circumstances:

  • Google LLC: To interact with Google Business Profile API on your behalf
  • AI Providers: Review text is sent to AI services (e.g., OpenAI / Anthropic) solely to generate reply suggestions. No personal identifiers are included beyond the review content you choose to process
  • Payment Processors: Billing information is handled by our payment gateway partner; we do not store card numbers
  • Hosting & Infrastructure: Cloud servers used to run the platform (data remains in India where possible)
  • Legal requirements: If required by law, court order, or government authority under Indian law

5. Data Retention

  • Account data is retained as long as your account is active
  • After account deletion, data is purged within 30 days, except where retention is required by law
  • Google tokens are deleted immediately upon disconnecting your Google account
  • Payment records are retained for 7 years as required under Indian tax law

6. Data Security

We implement industry-standard security measures to protect your data:

  • All data transmitted over HTTPS / TLS encryption
  • Google OAuth tokens stored encrypted in our database
  • Passwords hashed using bcrypt — we never store plain-text passwords
  • Regular security audits and vulnerability assessments
  • Access to user data restricted to authorized team members only

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Cookies & Tracking

We use cookies and similar technologies to:

  • Keep you logged in (session cookies)
  • Remember your preferences
  • Analyze usage and improve the platform (analytics cookies)

You can control cookies through your browser settings. Disabling cookies may affect certain features of the Service.

8. Your Rights (DPDP Act 2023)

As a data principal under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access: Request a summary of personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data (subject to legal retention requirements)
  • Grievance Redressal: Raise a complaint with our Grievance Officer
  • Withdraw Consent: Withdraw consent for data processing at any time (this may affect your ability to use the Service)
  • Nominate: Nominate another individual to exercise rights on your behalf in case of death or incapacity

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

9. Children's Privacy

ReplyJet is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

10. International Data Transfers

Your data is primarily stored and processed in India. When we use third-party AI or cloud services that may process data outside India, we ensure appropriate contractual safeguards are in place in compliance with applicable Indian data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date on this page and notify you via email or in-app notification for significant changes. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, a Grievance Officer has been appointed. For any privacy-related concerns, complaints, or requests, contact:

Grievance Officer — ReplyJet
Email: support@replyjet.in
Response time: Within 30 days of receiving the complaint