Privacy Policy

RepliFast is a product operated by SOULRISE LLC, a limited liability company registered in the United States ("we," "our," or "us"). This Privacy Policy explains how we collect, use, share, store, and protect your information when you use RepliFast ("the Service"). By using the Service, you agree to this Privacy Policy.

Information You Provide

• Account details such as name, email address, and password.
• Business details, including Google Business Profile information you connect.
• Preferences, settings, and instructions you provide in the platform.
• Payment information processed securely by Stripe.
• Support requests and communication you send us.

Information We Access From Google (with your authorization)

• Business profile information.
• Customer reviews and associated metadata.
• Permission to draft and post replies on your behalf.

We use this data solely to provide the Service. We do not sell or share it with third parties except subprocessors listed in Section 5.

Information Collected Automatically

• Log data such as IP address, browser type, and usage metrics.
• Device information and cookies for authentication, security, and analytics.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Fetch and manage your business reviews and generate replies.
• Draft replies based on your preferences and settings.
• Notify you about new reviews, replies, and account activity.
• Process payments and manage subscriptions.
• Comply with legal and regulatory obligations.
• Improve Service performance, reliability, and security.

The Service connects to your Google Business Profile only with your explicit consent.

• Limited Use. Google data is used only to provide review management and reply functionality. We do not resell Google data, use it for advertising, or for unrelated purposes.
• 30-Day Retention. Review content and related data retrieved from Google may be cached for operational purposes but never longer than 30 calendar days. After 30 days, cached data is deleted or refreshed directly from Google.
• Deletion on Disconnect. If you disconnect your Google account or terminate your subscription, all associated Google data is deleted within 7 days.
• Transparency. Replies are posted only after you approve them or under rules you configure. No changes are made to your Google account without your knowledge.
• Security. Access tokens are stored securely, encrypted in transit and at rest. We never ask for or store your Google password.
• Independence. RepliFast is not affiliated with Google. We comply with the Google API Services User Data Policy and Google Business Profile API policies.

We may use third-party AI services (such as OpenAI) to draft review replies. You remain responsible for reviewing, approving, and publishing responses under your Google Business Profile. We are not liable for harm, claims, or reputational damage resulting from AI-generated content.

We do not sell your data. We share it only with service providers who help us operate the Service, under strict contractual obligations:

• Supabase (database and authentication)
• Stripe (billing and payments)
• OpenAI (reply generation)
• Email service provider (transactional emails)
• Analytics tools (product improvement)

We may also disclose information if required by law or to protect rights, safety, or property.

• Account data is retained while your account is active.
• Google review data is cached for up to 30 days and then deleted or refreshed.
• On account closure or Google disconnect, all Google data is deleted within 7 days.
• Backup copies are overwritten on a rolling basis.
• You can request deletion at any time by contacting hello@soulrise.us.

We implement encryption, access controls, and secure storage to protect your data. While we take industry-standard measures, no system is fully secure. You are responsible for keeping your account credentials safe.

If you are located outside the United States, your data may be transferred to and processed in the US or other jurisdictions with different data protection laws. Where required, we rely on Standard Contractual Clauses or equivalent legal safeguards for such transfers.

For EEA & UK Users (GDPR/UK GDPR):

You have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Data portability.
• Lodge a complaint with your local supervisory authority.

For California Users (CCPA):

You have the right to:

• Know what categories of personal information we collect and how we use it.
• Request deletion of your personal information.
• Opt out of "sale" of personal information (we do not sell data).
• Exercise rights without discrimination.

Contact hello@soulrise.us to exercise these rights.

We use cookies and similar technologies for login sessions, security, and basic analytics. You can manage cookies through your browser settings, but some features may not work if cookies are disabled.

The Service is not directed to children under 13. We do not knowingly collect data from children under 13. If we learn we have inadvertently collected such data, we will delete it promptly.

Access to Google services depends on Google's approval and API availability. Initial setup may require authorization and Google's review, which may take up to two weeks.

We are not responsible for delays, denials, or interruptions caused by Google.

We are not liable for lost business, reputational damage, or indirect damages resulting from use of the Service.

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last Updated" date. Material changes will be communicated where legally required. Continued use of the Service means acceptance of the updated Policy.