Privacy Policy

1. Introduction

Welcome to ReviewReplier (“we,” “us,” or “our”), operated by AR Digital Services. We respect your privacy and are committed to protecting the personal data of our users, business owners, and customers who interact with our services via our website https://getreviewreplier.com and our application dashboard.

This Privacy Policy explains how we collect, process, store, and safeguard your personal information when you use our platform, including when you connect third-party platforms such as Google Business Profile, Google Play, or Meta Platforms (Instagram Graph API and Facebook).

2. Data Controller Information

The entity responsible for processing your personal data (the Data Controller) is:

• Company Name: AR Digital Services
• Product: ReviewReplier
• Official Contact Email: [email protected]
• Website: https://getreviewreplier.com

3. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information received from authorized third-party platforms.

A. Information You Provide to Us

• Account Registration: Name, business name, email address, password, and contact details.
• Preferences & Rules: Custom brand tone rules, automated reply preferences, and response guidelines you configure in AI Studio.
• Customer Support Communications: Inquiries, feedback, and support tickets sent to our team.

B. Information Received from Meta Platforms (Instagram Graph API & Facebook)

When you choose to connect your Instagram Professional (Business or Creator) account to ReviewReplier via Meta OAuth, we request only the necessary permissions required for review, comment, and message management:

• Account & Profile Metadata (instagram_business_basic): Instagram username, Instagram Business Account ID, connected Facebook Page ID, and account profile picture to identify your business channel.
• Comments & Mentions (instagram_business_manage_comments): Public comments, replies, and mentions on your business posts, along with timestamps and commenter display names, required to display incoming feedback and post authorized replies.
• Direct Messages & Customer Inquiries (instagram_business_manage_messages & Human Agent): Customer inquiries received in your Instagram Direct inbox to generate response suggestions and facilitate human agent support.
• Engagement Insights (instagram_business_manage_insights): Aggregated engagement trends, comment counts, and interaction metrics to generate customer sentiment reports.
• Authentication Credentials: Securely encrypted OAuth access tokens required to communicate with Meta Graph API on your behalf.

C. Information Received from Google Platforms

When you connect Google Business Profile or Google Play Console:

• Google location account information, reviewer public names, star ratings, review text, and review reply statuses.
• Encrypted OAuth tokens issued with your explicit permission.

4. How We Use Your Information

We use the collected information strictly for legitimate business purposes:

• Review & Comment Aggregation: Displaying your incoming customer reviews, ratings, and Instagram comments in a centralized inbox.
• AI Reply Generation: Generating context-aware, on-brand response drafts based on your custom prompt instructions.
• Publishing Authorized Replies: Submitting approved or rule-automated replies back to Instagram or Google on your behalf.
• Sentiment & Performance Analytics: Providing summary metrics on review ratings, response speed, and customer satisfaction trends.
• Account Security: Authenticating user logins, preventing fraudulent activity, and ensuring system reliability.

5. Meta Platform Data & Instagram API Compliance

• No Data Brokering or Sale: We do NOT sell, license, rent, or transfer any Meta User Data, Instagram content, or user metrics to third-party data brokers, ad networks, or credit agencies.
• No Public AI Model Training: We do NOT use your private Meta data, customer comments, or direct messages to train publicly available AI models.
• Strict Purpose Limitation: Instagram data is accessed and processed solely to provide user-directed comment management and reply automation services.
• No Surveillance: We do not use Meta user data to conduct surveillance or profiling of any individual.

6. How We Share and Process Data with Third Parties

We only share necessary data with trusted service providers under strict confidentiality agreements:

• AI Language Model Providers: Review text and comment snippets are processed via enterprise AI APIs (such as OpenAI and Google Cloud AI) to generate reply suggestions under zero-data-retention and non-training terms.
• Cloud Infrastructure & Database Hosting: Encrypted databases hosted in enterprise-grade data centers with strict role-based access control.
• Legal Compliance: If required by law, subpoena, or competent legal authority to protect our legal rights or prevent imminent harm.

7. Data Retention and Security

We employ industry-standard administrative, physical, and technical security safeguards, including TLS/SSL encryption in transit and AES encryption at rest for sensitive credentials and OAuth access tokens.

We retain your data only for as long as your account remains active or as needed to provide our services. When you disconnect a platform or delete your account, access tokens are immediately revoked and purged from our systems.

8. Your Privacy Rights (GDPR & CCPA)

Depending on your location, you may exercise the following rights regarding your personal data:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): Request permanent deletion of your account and associated platform data.
• Right to Withdraw Consent: Revoke permission to access your Instagram or Google account at any time.

9. How to Request Data Deletion

We provide simple and transparent mechanisms for complete data deletion:

1. Via Application Dashboard: Go to Settings > Platforms to disconnect any connected account (Instagram, Google), or select “Delete Account” to erase all data.
2. Via Meta / Instagram App Settings: Go to your Facebook/Instagram Settings > Apps and Websites > Select “ReviewReplier” > Click “Remove”.
3. Via Direct Request: Email us at [email protected] with the subject “Data Deletion Request”. We process and confirm all deletion requests within 48 to 72 hours.

For detailed instructions and tracking, visit our dedicated Data Deletion Instructions Page.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any updates will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact: