Legal

Privacy Policy

This policy explains what data ReplyLion collects, why we collect it, how long we keep it, and the control you have over it. It applies to replylion.com and the ReplyLion web application.

Last updated: October 23, 2026

1. Who we are

ReplyLion ("ReplyLion", "we", "us") provides AI-assisted Google review management software. Our website is https://replylion.com. For privacy questions, contact privacy@replylion.com.

2. Information we collect

Information you give us

  • Account details: name, email address, business name, and password hash (if you create a login directly with us).
  • Business profile details: information you add to help generate replies, such as your services, location, brand tone, and custom instructions.
  • Billing details: plan selection and payment status. Card data is collected and stored by Stripe, our payment processor. We do not store full card numbers.
  • Support messages: the content of emails or forms you send us.

Information from Google

When you connect a Google Business Profile, Google sends us an OAuth access token and refresh token, plus the profile data you authorize us to access. That typically includes your business name, location details, reviews, review ratings, reviewer display names, and the replies you publish. We never receive your Google password.

Information collected automatically

Like most web applications, we receive technical data such as IP address, browser type, device type, pages viewed, and timestamps. We use this to keep the service secure, diagnose errors, and understand aggregate usage. See Cookies below.

3. How we use information

  • To provide the service: sync reviews, generate AI drafts, publish replies you approve, and send alerts.
  • To operate your account and process subscriptions through Stripe.
  • To provide support and respond to privacy or security requests.
  • To improve the product, including understanding which features are used and where they fail.
  • To protect the service against fraud, abuse, and unauthorized access.
  • To comply with legal obligations.

We do not sell your personal information. We do not use your Google Business Profile data to train general-purpose AI models for other customers, and we do not share it with advertisers.

4. Google API data and Limited Use

ReplyLion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only request scopes needed to read reviews, generate drafts, and publish replies you approve. We do not use Google user data for advertising, and we do not allow humans to read it except when you ask for support, when required for security or legal reasons, or in aggregated, de-identified form.

5. AI processing

To generate a reply draft, the text of the review and the business context you provide are sent to our AI model provider for processing. We do not send your Google login credentials. Depending on your plan and configuration, drafts may be generated once per review; we store the resulting reply so you can review, edit, and post it.

6. When we share information

We share data only with service providers that help us run ReplyLion, including:

  • Google — to read your reviews and publish approved replies through the Google Business Profile API.
  • Stripe — to process subscription payments.
  • Email providers — to deliver review alerts, digests, and review request campaigns.
  • Hosting and infrastructure providers — to operate the service securely.
  • AI model providers — to generate reply drafts from the content you submit.

These providers are bound by contracts that limit their use of the data to providing services to us. We may also disclose information if required by law, to protect our rights or users, or in connection with a merger or acquisition (subject to this policy).

7. Data retention

We keep your account data while your account is active. If you cancel, your data is retained for 30 days so you can resubscribe without losing history, then permanently deleted unless a longer retention period is required by law. Review data synced from Google may be re-synced if you reconnect your profile.

If you disconnect Google from Settings → Google → Disconnect, your Google access is revoked immediately. We cannot access your Google account after disconnection.

8. Security

We protect OAuth tokens with AES-256 encryption at rest, use TLS in transit, restrict access to production systems, and log administrative actions. Tokens are never placed in application logs or shared with third parties beyond the scopes described above. No system is perfectly secure, but we work to detect and respond to incidents promptly.

9. Cookies and similar technologies

We use essential cookies to keep you signed in, protect forms against abuse, and remember interface preferences. We may use privacy-conscious analytics to understand aggregate traffic. We do not use cookies to serve third-party advertising.

You can block or delete cookies in your browser settings. If you block essential cookies, parts of the service may not work. Where required by law, we will ask for consent before setting non-essential cookies.

10. Your rights (GDPR, UK GDPR, and similar laws)

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent.

We process personal data on the following legal bases: performance of a contract (to provide ReplyLion), legitimate interests (security, product improvement, and fraud prevention), consent (where required, such as marketing emails), and legal obligation.

To exercise a right, email privacy@replylion.com. We respond within 30 days. You may also lodge a complaint with your local data protection authority. We do not discriminate against you for exercising privacy rights.

11. International transfers

ReplyLion may process data in the United States and other countries where our providers operate. When required, we use contractual safeguards such as standard contractual clauses to protect data transferred from the EEA or UK.

12. Children

ReplyLion is a business tool intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the product changes. If a change is material, we will notify account holders by email or in the app. The "last updated" date at the top of this page reflects the current version.

14. Contact

Privacy questions and data requests: privacy@replylion.com.
General support: support@replylion.com.

See also our Terms of Service and contact page.