Privacy Policy — ReplyAI: Communication Assistant
Effective Date: April 8, 2026
1. Overview
ReplyAI (“we”, “our”, or “the extension”) is a Chrome extension that helps you rewrite and improve text communications using AI. This policy explains what data we collect, how we use it, and your rights.
2. Data We Collect
Account Information
When you register, we collect:
- Email address — used for authentication and account management
- Display name — shown in your account profile
- Password — stored as a one-way cryptographic hash; we never store your plain-text password
Usage Data
- Daily rewrite count — tracked to enforce free-tier limits
Text Content
- Text you submit for rewriting is sent to our server and forwarded to OpenAI’s API for processing. Submitted text is temporarily cached in server memory to avoid redundant API calls. It is not persisted to a database or stored long-term.
3. How We Use Your Data
| Data | Purpose |
|---|---|
| Email & name | Account creation, authentication, and support |
| Password hash | Secure login verification |
| Daily rewrite count | Enforce usage limits |
| Submitted text | Generate AI-rewritten responses via OpenAI |
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-Party Services
We use OpenAI to process text rewriting requests. Text you submit is sent to OpenAI’s API under their Privacy Policy and Terms of Use. OpenAI may retain submitted content per their data usage policies.
5. Data Retention
- Account data is retained as long as your account is active.
- In-memory text cache is ephemeral and cleared automatically on server restart or eviction.
- You may request deletion of your account and associated data at any time.
6. Security
- Passwords are hashed using bcrypt before storage.
- Authentication uses JWT tokens with a 30-day expiry.
- API access is rate-limited to prevent abuse.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Withdraw consent at any time by deleting your account
To exercise these rights, contact us at: [your-email@example.com]
8. Children’s Privacy
ReplyAI is not directed at children under 13. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this policy. Changes will be posted at this URL with an updated effective date. Continued use of the extension after changes constitutes acceptance.