ReplyPilot Privacy Policy
This policy describes information handled by the ReplyPilot website, account and Chrome extension. Reply generation uses cloud processing; it does not happen entirely on your device.
Information Collection
- Account and authentication: Account identity, profile information and session credentials connect your browser to your ReplyPilot account and reply allowance.
- Selected discussion and reply instructions: When you request a draft, the extension sends selected post or comment context, relevant surrounding context and your reply settings to ReplyPilot's service for AI processing. That context can include other people's names and words.
- Saved personalization: You can add profile information, facts, instructions and text or Markdown documents. Relevant saved context can be included in generation requests when personalization is enabled.
- Generated drafts, edits and usage: The service records generation activity and can store requests and responses. When automatic learning is enabled, deliberately inserting an edited generated reply can save a writing example for later personalized replies.
- Subscription and payment information: Stripe processes subscription payments. ReplyPilot uses customer and subscription identifiers, plan and invoice details, payment status, billing periods and allowance records to manage access. Where provided during payment, the account service can also receive and store a billing address and payment-method metadata. This metadata describes the payment method and does not include a complete payment-card number.
- Technical and interaction information: Account sign-in and service requests can include IP addresses, browser and user-agent information, request paths, timestamps and response status. Authentication sessions and hosting request logs can retain this metadata to support account access, prevent abuse and operate the service. The extension also processes current-page URLs and relevant editor interactions to identify the discussion and where to insert a reply.
- WhatsApp conversation processing: After you open ReplyPilot's sidebar on WhatsApp, the extension can read participant names, message text and message dates from the displayed conversation. When the required account and conversation identifiers are available, it can attempt to upload captured messages to ReplyPilot's service. The extension can process this information locally even if the service does not accept the upload. WhatsApp reply generation and message storage may be unavailable even when this local capture runs.
Only include information you are permitted to submit for this processing. Publicly visible discussion content can still contain personal information.
Use of Information
We use this information to authenticate your account, generate and personalize reply drafts, apply your preferences, manage subscriptions and allowances, and operate and support the service. We do not sell your information. Providing these functions involves sharing relevant information with service providers as described below.
Automatic Learning and Your Controls
Automatic learning from edited replies starts on. Deliberately inserting an edited generated reply can save a bounded writing example. Inserting a draft does not publish it, and copying a draft alone does not save an example.
You can turn learning off and review, edit, disable or delete saved context in your account's memory settings. Turning learning off stops new examples from being saved; it does not delete existing examples or earlier generation and usage records. Disabling personalization prevents saved context from being included in that generation request.
After you successfully insert an edited generated reply, the extension sends the edited text, draft identifier and confirmation of insertion to ReplyPilot's service. This feedback is still sent when learning is turned off; that setting controls whether a new writing example is saved.
Deleting a saved context entry removes its saved text from this feature and future retrieval. It does not by itself delete the original generation record or all account data. Use the contact route below for a broader access or deletion request.
Optional Website Analytics
With your explicit analytics consent, PostHog (US Cloud) measures public website page visits and clicks leading to ReplyPilot's Chrome Web Store listing. These clicks do not confirm installation or extension use. PostHog receives a random browser identifier, session identifiers, page hostname and path, event time, and basic browser/device information. Network requests necessarily reach PostHog with an IP address; the integration disables IP-based enrichment and geolocation. This integration does not send URL query strings or fragments, account identifiers, email addresses, message contents, personalization, drafts or form values. Automatic interaction capture and session replay are disabled, and account, sign-in, onboarding and extension handoff routes are excluded.
Analytics starts only after you choose Accept All. Rejecting non-essential cookies leaves PostHog disabled. Cookie preferences in the footer lets you withdraw consent for future capture; withdrawal also clears this integration's stored analytics identity. The consent choice is saved for one year. Earlier choices are requested again when the analytics consent version changes. Withdrawing consent does not delete events already received; contact us below for data requests.
Data Protection
We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information.
User Rights
Users have the right to access, correct, delete, or transfer their personal data at any time. Requests to exercise these rights can be directed to the contact information listed below.
Data Retention and Deletion
We retain personal information only for as long as necessary to provide the services requested by the user, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our policies.
Third-Party Service Providers
The current reply pipeline uses OpenAI to process generation requests. Selected discussion context, reply instructions and relevant personalization may be included in those requests. Google Cloud hosts the application and its data services. Stripe processes subscription payments and sends billing events used to manage access.
Service-provider processing is separate from selling data. Do not assume that submitted context or generated text is never stored. If your organization requires specific retention, data-location or contractual assurances, contact us before submitting confidential information.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
This policy was first published on May 6, 2024. Information-handling and learning explanations were updated on October 19, 2026. Optional website analytics was added on November 1, 2026.
Contact Information
For any questions or concerns regarding this Privacy Policy or our treatment of personal information, please contact us at:
- Operator: REPLYPILOT SP ZOO
- Email: [email protected]
- Address: Juliusza Słowackiego 24, Rzeszów 35-060, Poland