Legal
Privacy Policy
Last updated: 26 April 2026
Who we are
ReplyRight is operated as a sole proprietorship based in Singapore. We provide an AI-powered tool that helps local businesses draft responses to their Google reviews. References to "we", "us", or "our" in this policy refer to ReplyRight.
This policy describes what personal data we collect, how we use it, and your rights under Singapore's Personal Data Protection Act 2012 (PDPA).
What data we collect
We collect the minimum data necessary to provide the service:
- Account data — your name and email address, collected when you sign up via Clerk (our authentication provider).
- Usage data — the number of responses you have generated and your subscription tier, stored to enforce usage limits.
- Review content — the review text and business name you enter to generate a response. This is sent to Anthropic's API to produce the output and is not stored after the response is returned to you.
- Payment data — if you subscribe to a paid plan, Stripe collects and processes your card details directly. We never see or store your full card number.
- Security logs — we record flagged or rate-limited requests (without storing the review content) for abuse prevention.
How we use your data
- To create and manage your account
- To provide the review response generation service
- To enforce free-tier usage limits and process paid subscriptions
- To detect and prevent abuse or security threats
- To contact you about significant changes to the service or your account
We do not sell your data. We do not use your review content to train AI models.
Data retention
We retain your account data for as long as your account is active. Usage records are retained for billing and limit-enforcement purposes. Security logs are retained for up to 90 days.
Review content you submit is not stored — it is processed in memory to generate a response and discarded immediately after.
Your rights
Under Singapore's PDPA, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Withdraw consent and request deletion of your account data
To exercise any of these rights, email us at [replyright@hotmail.com]. We will respond within 10 business days.
Cookies
We use only essential cookies required for authentication (set by Clerk). We do not use advertising or tracking cookies.
Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page and notify you by email if the changes affect how we handle your personal data.
Contact
Questions or concerns about this policy? Email us at [replyright@hotmail.com].