Privacy Policy

Account information. You sign in with Google. We receive your email address and a Google account identifier, which we bind to your Replyfast account (managed by Supabase). We do not receive your Google password.

Profile information. To generate replies or buy credits, you complete a Profile with your niches (including optional free-text detail), your account stage, a positioning statement, and optionally up to five projects (name, URL, description). You provide this directly, and we store it.

Credits and usage records. We keep your credit balance and a simple ledger of three movements only: a one-time signup grant (+20 credits), credit pack purchases (+credits), and successful generations (−1 credit). Failed generations deduct nothing and are not recorded as spends.

Support requests. If you email us at support@replyfast.uk, we keep your message and email address so we can respond.

Your X timeline or posts. The extension reads the post you are replying to in memory, at the moment you click Generate. It is never stored on our servers.

Your generated replies. Drafts exist in your browser's memory and in the side panel until you dismiss them. They are never persisted by us.

Payment card numbers. Payments are processed by Creem. We never see or store card details; we receive only a payment confirmation and a customer reference.

Behavioral analytics. We do not run third-party analytics or advertising trackers on replyfast.uk, and we keep no events table about your activity beyond the credits ledger above.

When you click Generate, the extension sends the text of the post you selected, your tone choice, and your positioning context to our AI provider over an encrypted connection, solely to produce your three drafts. Our AI provider operates under a zero data retention arrangement: request content is used only to produce your drafts and is not retained or used to train models. The result returns to your browser. We do not log these requests.

We use your data only to operate your account and the extension, deliver session tokens to the extension after sign-in, maintain your credit balance and ledger, process pack purchases through Creem, show your Profile and Usage history to you, and answer support requests. We do not sell or share your personal data for advertising.

We share data only with the providers needed to run Replyfast: Supabase (authentication and database), Creem (payment processing), Google (sign-in), and our AI provider (generation). Each processes data under its own terms and is not permitted to use it for advertising.

After you sign in on the web, the login page hands a short-lived access and refresh token to the extension through a one-time message. The extension stores these tokens locally on your device so you stay signed in. Signing out deletes them immediately, without a confirmation step.

We keep your account, Profile, balance, and ledger while your account exists. You can edit your Profile at any time, and sign out at any time from Account. We do not currently offer self-service deletion; if you email us, operations will manually delete your profile, wallet, and ledger records.

Children. Replyfast is not directed at anyone under 13, and we do not knowingly collect their data.

Changes. If we change this policy materially, we will update the date above and, for significant changes, notify you in the extension before they take effect.

Contact. Email us.