Last updated October 20, 2026
ReplyPorch is operated by Bobby Clay, an individual sole proprietor in Lumberton, Texas, trading as ReplyPorch. This policy explains what we collect and why. Questions or requests: hello@replyporch.com.
What we collect
- Your email address, to sign you in and send service emails.
- A sign-in cookie that keeps you logged in.
- If you use the free review reply generator, an anonymous random ID cookie (rp_bid) so we can count free uses per browser and enforce the free-reply limit. It holds no personal information, can’t be read by page scripts (httpOnly), is only sent to the generator, and expires after one year. We don’t use advertising or tracking cookies.
- Reviews you paste, your brand voice settings, and the replies we draft, so you can see your history.
- If you join a waitlist, your email and the plan you picked.
- For the free reply generator, a one-way hash of your IP address, used only to apply the free-reply limit.
- If you connect a Google Business Profile, access tokens for that connection, stored encrypted.
- If you buy a paid plan, Paddle collects your payment details. We don’t see or store your card number.
How we use it
Only to run ReplyPorch: signing you in, drafting replies, enforcing plan limits, and contacting you about your account. We don’t sell your data or use it for advertising.
Who we share it with
We use a small number of service providers to run the site: Cloudflare (hosting), Supabase (database), Resend (sign-in emails), Paddle (payments, as Merchant of Record), and, when AI replies are enabled, an AI provider that receives the review text to draft a reply. Each one processes data only to provide its service to us. We may also disclose information if the law requires it.
How long we keep it
We keep your account data while your account is open. Ask us to delete your account and we’ll delete your data within 30 days, except records we must keep by law (such as payment records held by Paddle).
Your choices
You can ask to see, correct, export, or delete your data by emailing hello@replyporch.com. You can disconnect a Google Business Profile at any time.
Security
Connections use HTTPS. Sign-in links and sessions are stored only as hashes, and Google tokens are encrypted.
Children
ReplyPorch is a business tool and isn’t meant for anyone under 18.
Changes
If we change this policy, we’ll update the date above.