Privacy Policy

Last updated: 7 July 2026

Review Reply Plus ("we", "our", "the app") is operated from Australia and accessible at reviewreply.com.au. This policy explains what data we collect, how we use it, and how you can remove it.

1. Information we collect

• Account data: name, email, and password hash supplied at sign-up.
• Business profile data: business name, address, phone, website, brand voice settings you enter.
• Reviews and replies: review content imported manually or via connected platforms, and the reply text you publish.
• Google account data: when you connect Google, we receive your email address, your Google Business Profile account and location IDs, and the reviews on those locations.

2. Use of Google user data

When you connect your Google account, we request the business.manage scope. We use this access solely to:

• List the Google Business Profile accounts and locations you own or manage, so you can choose which to connect.
• Read reviews left on those locations.
• Publish replies that you have explicitly approved inside the app.

We do not sell Google user data, use it for advertising, or share it with third parties for their own purposes. We do not use Google user data to train generalised AI/ML models. Google user data is used only to provide the features described above and is handled in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

3. AI-generated reply drafts

The text of imported reviews and your brand voice settings are sent to our AI provider to draft suggested replies. These drafts are returned to you for approval before being published. The AI provider processes data on our behalf and does not retain it for model training.

4. Storage and security

Data is stored in a managed PostgreSQL database with row-level security so each account can only access its own records. OAuth refresh tokens are stored server-side and never exposed to the browser. Connections to our service are encrypted in transit (HTTPS/TLS).

5. Data retention and deletion

We retain your data while your account is active. You can:

• Disconnect Google at any time from the business settings — this revokes our stored tokens.
• Delete individual businesses or reviews from inside the app.
• Request full account deletion by emailing admin@reviewreply.com.au. We will delete all account data, including any Google user data we hold, within 30 days.

You can also revoke this app's access at any time from your Google Account permissions page.

6. Cookies

We use a small number of essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

7. Children

The service is intended for business owners and is not directed at children under 16.

8. Changes to this policy

If we make material changes, we will update the "Last updated" date above and notify active users by email.

9. Contact

Privacy questions: admin@reviewreply.com.au