Legal

Privacy Policy

Last updated 5 August 2026

Reply Pilots (“Reply Pilots”, “we”, “us”) provides a Chrome extension and a web app (app.reply-pilots.com) that help you draft replies, DMs and posts in your own voice on social platforms. This policy explains what we collect, where it goes, and how long we keep it. It covers both the extension and the web app.

1. What the extension reads — and when

The extension does nothing until you open it on a post or message and ask for a draft. At that moment it reads:

  • the text of the post or message you’re replying to, and
  • the comments or message turns already visible on your screen,

so the AI can write a reply that fits the conversation. That content is sent to our web app for that single request and passed to the AI provider that generates the draft. The extension does not scrape pages, log into accounts, run in the background, or read anything you haven’t asked it to act on. You can switch it off on any site at any time, and it never posts anything — every message is sent by you, by hand.

2. Information you give us

  • Account — your email address and, optionally, your name; a hashed password; your sign-in sessions.
  • Business context — the details you choose to add about your business, and links to social accounts or pages you follow. These are stored as text you enter; we do not fetch or crawl them.
  • Your content — the prompts you run and the drafts the AI returns (your history / library), saved prompts, and planner posts.
  • Settings — platform, model and notification preferences, and, if you add one, your own AI provider key. Provider keys are encrypted at rest, are never returned by any endpoint, and are never shipped in the extension.
  • Billing — records of credits and any payment an administrator records on your account. We do not process card payments and store no card numbers.

3. Information collected automatically

  • Technical data needed to run and secure the service: IP address and browser / user-agent (for your sessions and abuse prevention), and a periodic “the extension is connected” heartbeat.
  • Website analytics — our marketing site (reply-pilots.com) uses Google Tag Manager / Google Analytics cookies to understand traffic. The web app itself is not an advertising surface.

4. Where your data goes

We share data only with the providers needed to run the service:

  • AI provider — to generate your drafts. By default this is OpenRouter, which routes your request to the underlying model. If you add your own key (OpenAI, Anthropic, Google or OpenRouter), your requests go to that provider instead and are billed to you. No provider key is ever included in the extension.
  • Hosting & infrastructure — our self-hosted servers and databases (PostgreSQL, Redis, Neo4j).
  • Email — an SMTP provider, for transactional email such as address verification and password resets.
  • Analytics — Google, for the marketing site as described above.

We do not sell your personal information, and we do not share it for advertising. We do not use the content you send us to train our own models; any handling by the AI provider is governed by that provider’s terms.

5. How long we keep it

  • Account data — until you delete your account.
  • Your history, drafts and planner posts — until you delete them, or until your workspace’s retention window elapses. Your workspace owner can set how long generations and planner posts are kept, and a daily job removes anything past that window.
  • Content read for a draft — processed for that request and stored only as part of your history above; its handling by the AI provider follows that provider’s retention terms.
  • Security logs and sessions — kept for a limited period, then expired.

6. Your choices and rights

  • View and export your history (CSV export is built in) and delete individual items.
  • Remove your own AI provider key at any time; deletion takes effect on your next run.
  • Request access to, or deletion of, your account data by contacting us. Depending on where you live you may have additional rights (access, correction, deletion, portability, objection); we honour these requests.
  • Turn the extension off per site, or uninstall it, at any time.

7. Cookies

The web app uses a strictly-necessary session cookie to keep you signed in. The marketing site uses analytics cookies as described in section 3.

8. Children

Reply Pilots is a business tool and is not directed to children. Do not use it if you are under 18.

9. Changes to this policy

We’ll post any changes on this page and update the date above. Significant changes will be highlighted.

10. Contact

Questions about privacy, or a data request? Reach us through our contact page, or email support@reply-pilots.com.