Privacy Policy for GetReply

1. Introduction

Welcome to GetReply ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the GetReply Chrome Extension and the associated website (getreply.xyz). By using GetReply, you agree to the practices described in this policy.

2. Zero Data Retention Policy (LinkedIn™ Data)

GetReply is designed as a privacy-first productivity tool. When you use the extension to generate an outreach message, the extension reads the visible text on the currently opened profile page.

• Transient Processing: This text is sent securely to our AI provider solely for the purpose of generating your personalized message.
• No Storage: We do not save, store, sell, or log the names, work histories, or any other personal data of the profiles you browse. The context data is immediately discarded from our servers once the AI generation is complete.

3. Data We Collect About You (The User)

To provide our services, we collect minimal data directly from you:

• Account Information: When you create an account, we collect your email address and authentication tokens (via standard email login or OAuth via Google). We do not store passwords in plain text (we use secure hashing).
• Subscription Data: We track your subscription tier (Free, Starter, Pro) and your AI credit balance to provide the service.
• Payment Information: All payments are processed securely by our Merchant of Record, Polar.sh (and their underlying partner, Stripe). GetReply does not process, collect, or store your credit card details.

4. How We Use Your Data

We use the collected data exclusively to:

• Provide, maintain, and improve the GetReply extension.
• Process your authentication and manage your session securely.
• Track your usage limits (credit balance) and subscription status.
• Send you important transactional emails (e.g., payment receipts, password resets).

5. Third-Party Services

We use trusted third-party services to operate GetReply, which are bound by strict data processing agreements:

• Supabase: For secure database hosting and user authentication.
• Polar.sh / Stripe: For subscription and payment processing.
• AI Providers: To generate the text messages. Data sent to AI APIs is strictly used for generation and is explicitly opted out of being used to train third-party AI models.

6. Your Data Rights (GDPR Compliance)

If you are a resident of the European Economic Area (EEA), you have the right to:

• Access the personal data we hold about you (your account info).
• Request the deletion of your account and all associated data.
• Correct any inaccurate information.

To exercise these rights, please contact us using the information below.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Effective Date" at the top of this document or via email.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

• Email: support@getreply.xyz
• Data Controller: Illia Lisokolenko