Privacy Policy

Last updated: March 20, 2026

Overview

At ReplyWell™ (a product of Goodword, operated by Empire Data Solutions LLC), your privacy matters. This policy explains what data we collect, why we collect it, and how we protect it. We keep things simple and transparent — no surprises.

What We Collect

Account Information: Email address, name, and business name when you sign up.

Google Business Profile Data: When you connect your Google Business Profile, we access your business reviews, reviewer names, star ratings, and review text. This is used solely to generate AI responses.

AI Responses: The responses we generate and any edits you make before posting.

Payment Data: Payment processing is handled entirely by Stripe. We never see or store your full credit card number. We only store your Stripe customer ID to manage your subscription.

Usage Data: Basic analytics like pages visited, features used, and response approval rates to improve the product.

How We Use Your Data

  • Generate AI responses to your customer reviews
  • Post approved responses to your Google Business Profile
  • Manage your subscription and billing
  • Improve our AI — we may use anonymized, aggregated data to improve response quality (never your specific business data)
  • Send you updates — service notifications, new features, and occasional product emails (you can unsubscribe anytime)

AI Processing & Automated Decision Making

ReplyWell™ uses artificial intelligence (specifically Anthropic's Claude) to generate review responses on your behalf. Here's exactly how it works:

  • What data is sent to AI: The review text, reviewer name, star rating, your brand voice settings, and your Business Facts are sent to Anthropic's Claude API to generate a response.
  • No training on your data: Anthropic does not use API inputs/outputs to train their models. Your reviews and responses are never used for AI training by either ReplyWell™ or Anthropic.
  • Data retention by Anthropic: Anthropic may retain API inputs for up to 30 days for safety monitoring, after which they are deleted. See Anthropic's privacy policy for details.
  • Human review before posting: By default, all AI-generated responses require your approval before being posted to your Google Business Profile. If you enable Auto-Approve, responses meeting your star threshold are posted automatically — you are responsible for reviewing this setting.
  • AI limitations: AI-generated responses may occasionally contain errors or inappropriate suggestions. You are responsible for reviewing all responses before they are published. ReplyWell™ is not liable for the content of published AI-generated responses.

We Never Share Your Personal Data

We do not sell, rent, trade, or share your personal data with third parties for marketing purposes. Period.

Your data is only shared with the service providers listed below, solely to deliver our service to you. We share only the minimum data necessary for each provider to function.

Third-Party Services

We use trusted third parties to provide our service:

  • Google — OAuth authentication and Business Profile API
  • Anthropic (Claude) — AI response generation (review text + business context sent for processing)
  • Stripe — Payment processing (we never see your full card number)
  • Resend — Transactional email delivery (welcome emails, notifications, password resets)
  • Railway — Application and database hosting
  • Cloudflare — DNS, security, and backup storage

Each provider has their own privacy policy and data processing agreements. We have reviewed their policies and maintain Data Processing Agreements where applicable.

Cookies

We use a single essential cookie ("session") to keep you logged in. We don't use tracking cookies, advertising cookies, or sell your data to advertisers. Ever.

Data Retention

We keep your data for as long as your account is active. If you cancel your account, we delete your data within 30 days. Some data may be retained longer if required by law (tax records, etc.).

Your Rights

You have the right to:

  • Access your data — see what we have stored
  • Export your data — download your reviews and responses
  • Delete your data — request full account deletion
  • Correct your data — update inaccurate information
  • Object to processing — opt out of non-essential data use

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

California Privacy Rights (CCPA)

If you're a California resident, you have additional rights under the CCPA. We do not sell personal information. You can request disclosure of what data we collect and request deletion. Contact us at the email above.

European Privacy Rights (GDPR)

If you're in the EU/EEA, we process your data based on: (a) your consent, (b) performance of our contract with you, and (c) our legitimate business interests. You have rights to access, rectify, erase, restrict, and port your data. Contact us or your local data protection authority.

Children's Privacy

ReplyWell™ is designed for business use and is not intended for children under 18. We do not knowingly collect data from minors.

Data Processing Agreements

If you are a business using ReplyWell™ to manage customer review responses, you are a data controller and we are a data processor under applicable privacy laws. We process customer review data (reviewer names, review text) on your behalf and at your instruction.

For businesses requiring a formal Data Processing Agreement (DPA), please contact [email protected].

Data Security

We protect your data with industry-standard security measures including:

  • Encryption in transit: All data is transmitted over HTTPS/TLS
  • Password security: Passwords are hashed with bcrypt (never stored in plain text)
  • Session security: Secure, httponly cookies with SameSite protection
  • Rate limiting: API endpoints are protected against abuse
  • Database backups: Automated daily encrypted backups
  • Access controls: Strict separation between customer accounts

No system is 100% secure. We'll notify you promptly if we discover a data breach that affects your information.

Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes via email. The "Last updated" date at the top reflects the most recent version.

Contact Us

Questions or concerns about your privacy? We're here to help.

Email: [email protected]

Support: [email protected]