This Privacy Policy describes how Replio LLC ("Replio," "we," "us," or "our") collects, uses, and protects information when you use our review management platform at app.repliohq.com and our website at repliohq.com (collectively, the "Service").
Replio is a B2B SaaS platform that helps multi-unit franchise restaurant operators manage their Google Business Profile reviews. We provide tools to fetch reviews, generate suggested reply drafts, and post owner replies on behalf of authorized business owners.
When you authorize Replio to access your Google Business Profile (GBP), we request the https://www.googleapis.com/auth/business.manage scope. With your authorization, we access:
We use this access to display reviews inside your Replio dashboard, generate AI-suggested reply drafts, and post owner replies you have explicitly approved back to Google on your behalf.
We use the information we collect to:
Replio's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
Replio uses Anthropic's Claude API to generate suggested reply drafts and coaching briefs based on review content and your business context. When we send review content to Anthropic, that content is subject to Anthropic's data handling terms. Anthropic does not train models on Replio API data per Anthropic's stated policy.
Replio also sends review text to OpenAI's embeddings API. An embedding is a numeric representation of the text, which lets us group recurring themes across reviews and locations without a human reading every one. Text is sent for embedding only, never for content generation.
In both cases we do not send personally identifiable customer information beyond what is already publicly visible on the review itself, meaning the reviewer's public display name, the rating, and the comment.
Replio never posts a reply automatically. Every suggested draft requires a person to review and approve it before it is published.
We do not sell your personal information or your customers' review data. We share information only as follows:
Replio uses the third parties below to operate the Service, each under its own published data processing terms. This list is current as of the date at the top of this page, and we update it when a sub-processor is added or removed.
These receive guest review content or personal data:
These receive account or operational data only, not guest review content:
To request our current sub-processor list or a copy of our data processing terms, contact help@repliohq.com.
SMS is optional. You are never required to provide a mobile number or to agree to receive text messages in order to create a Replio account, to buy a subscription, or to use any part of the Service. Everything Replio does over SMS is also available without it.
If you opt in to receive SMS messages from Replio, we may send operational alerts, guest feedback notifications, assigned action reminders, account notifications, and customer support messages. Message frequency varies based on account activity. Message and data rates may apply. You may opt out at any time by replying STOP. Reply HELP for assistance.
Replio does not sell, rent, or share mobile phone numbers, SMS consent information, or SMS opt-in data with third parties or affiliates for marketing or promotional purposes. We use your mobile number and your consent record only to send the messages described above and to keep proof that you agreed to receive them. The only third party that receives your mobile number is the telecommunications provider that transmits the message on our behalf, listed in section 5.1, and it may not use that number for its own purposes.
Replying STOP to any Replio message ends SMS delivery to that number and we record the opt-out. You can also withdraw consent by emailing help@repliohq.com. Opting out of SMS does not affect your account, your subscription, or your access to the Service.
We retain your account information and review data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow reactivation, after which it is deleted from production systems within 30 days. Backups containing your data are retained for up to 12 months for disaster recovery and are then overwritten.
You may request earlier deletion at any time by emailing help@repliohq.com.
To exercise any of these rights, contact help@repliohq.com.
We implement industry-standard security measures, including encryption in transit (TLS) and at rest, Row-Level Security on our database, OAuth-based authentication, scoped API tokens per customer, and regular security reviews. No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you in accordance with applicable law.
Replio is a B2B service intended for use by business owners and their teams. The Service is not directed to children under 16, and we do not knowingly collect personal information from children.
Replio is operated from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or through the Replio dashboard before the change takes effect.
If you have any questions about this Privacy Policy or our data practices, contact us at:
Replio LLC
Email: help@repliohq.com