Privacy Policy

We collect only what the Service needs to function. Specifically:

• Account and personal information. When you sign in with Google, we receive your email address and basic profile information (such as your name) via Google’s OpenID/OAuth flow, using only the openid, email, and profile scopes. We do not request access to your Gmail mailbox through the Gmail API.
• Authentication information. We store and transmit authentication tokens (a Google OAuth token and/or a ReplAI session token) so that you stay signed in and your requests can be securely authenticated. We never receive or store your Google password.
• Support conversation content. When you ask ReplAI to generate or translate a reply, we process the content of the support conversation you have open — the ticket, email thread, or chat, including its messages and any text, images, or links it contains. This content may include personal information about you or third parties (for example, a customer’s name or email address) that appears within the conversation. ReplAI reads this content only when you invoke it and only for the conversation you are working on.
• Preferences and settings. Your working language, tone, formality, signature, custom instructions, and saved prompts.
• Billing and payment information. We keep a record of your subscription status and credit transactions (your purchase and usage history). All card and payment-instrument details are collected and processed solely by our payment processor, Stripe — ReplAI never receives or stores your card number.
• Technical and log data. Standard request data such as IP address and timestamps, used to operate, secure, and debug the Service.

• We do not track your browsing history across the web.
• We do not log your keystrokes, clicks, mouse movements, or scrolling, and we do not run third-party analytics or advertising trackers in the extension.
• We do not collect health information.
• The extension runs only on Jira Service Management (*.atlassian.net), Intercom (app.intercom.com), and Gmail (mail.google.com). It does not read or run on any other website.

• To generate and translate replies you request.
• To authenticate you and keep you signed in.
• To provide your subscription, credits, and billing.
• To operate, maintain, secure, and improve the Service.

We do not sell your data, and we do not use or transfer your data for purposes unrelated to providing the Service — including advertising, building user profiles, or determining creditworthiness or lending eligibility.

We share data only with the service providers needed to run ReplAI, and only as required to provide the Service:

• Google — for sign-in (OAuth), and Google’s Gemini models to generate and translate replies. Conversation content you submit is sent to Google for AI processing.
• Stripe — to process payments and manage subscriptions.
• Cloudflare — for hosting and infrastructure (including our backend and database).
• InboxSDK — a library used to integrate with Gmail’s interface.

We may also disclose information if required by law or to protect the rights, safety, and security of ReplAI and its users.

ReplAI’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information obtained through Google sign-in is used only to provide and improve the Service and is never sold or used for advertising.

We retain your account, settings, and billing records for as long as your account is active. Conversation content is processed to produce a reply and is not retained for longer than necessary to provide and operate the Service. You can request deletion of your account and associated data at any time (see “Your rights” below).

We use industry-standard measures — including encryption in transit (HTTPS) and scoped access tokens — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent or close your account at any time. To exercise any of these rights, contact us at goreplai@gmail.com.

ReplAI is a workplace tool intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under the age of majority in their jurisdiction.

ReplAI and its service providers may process and store information in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in accordance with this policy.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by other reasonable means.

If you have questions about this Privacy Policy or how we handle your data, contact us at goreplai@gmail.com.