Privacy policy

ReplySeal stores only what is required to reply to your Google reviews: connection identifiers, location identifiers, and the reviews themselves. Where OAuth tokens are held locally they are encrypted with AES-256-GCM at rest. You can disconnect Google or delete your account at any time.

Data processors (subprocessors)

To deliver the service we rely on the following processors, each bound by a data processing agreement (GDPR Art. 28):

• GMBapi (Netherlands) — connects to your Google Business Profile and posts replies on your behalf. Receives your review content and reply text.
• Google (Ireland/USA) — Business Profile data and review replies.
• OpenAI (USA) — generates and moderates reply text. Review content is sent to generate a reply; not used to train models.
• Supabase (EU, Paris region) — database and authentication.
• Stripe (Ireland/USA) — payment processing.
• Vercel (USA) — application hosting.

Public review replies never expose personal contact details (emails, phone numbers, URLs are automatically removed). Questions: eltaiefmedkhalil@gmail.com