1. Information We Collect

a. Facebook Page Integration

When you connect your Facebook account, we collect:

• Page ID and name
• Posts and public comments
• Comment metadata (author name, timestamps, reactions)
• Facebook access tokens

We do not access private messages or password data.

b. Account Information

During registration or login, we may collect:

• Email address
• Name (if provided)
• Authentication metadata
• IP address, login timestamps, and device/browser info

c. Usage Data

We may collect:

• App interaction logs
• Prompt configurations
• AI-generated reply history (if logging is enabled)
• Crash/error reports

2. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Authenticate users and connect Facebook Pages
• Generate AI responses to comments
• Personalize user experience
• Monitor performance and fix bugs
• Send updates, invoices, or support responses
• Comply with legal obligations

We do not sell your data under any circumstances.

3. Use of Artificial Intelligence (OpenAI)

We use OpenAI to generate automated comment replies. When a public comment is detected on a connected Facebook Page, we send relevant content and your customized prompt settings to OpenAI's API to generate a response.

While AI helps automate interactions, it may sometimes produce inaccurate or inappropriate content. We strongly recommend reviewing AI-generated replies periodically.

By enabling this feature:

• You accept full responsibility for all content published via AI on your Facebook Pages.
• You agree to monitor and manage your AI configurations.
• You agree to comply with OpenAI's usage policies, which prohibit certain use cases (e.g., harassment, disinformation, impersonation, hate speech).

We do not use your data to train OpenAI's models, and OpenAI does not retain input/output per its API policy.

4. Data Sharing and Third Parties

We only share data with third parties when necessary to provide the Service:

All partners are bound by confidentiality and data processing agreements.

5. Payments and Subscriptions

Some features require a paid subscription, processed securely through Stripe. When subscribing:

• You authorize recurring charges to your chosen payment method.
• Stripe handles your billing data, which is governed by their Privacy Policy.
• We do not store your full credit card information.

You can update billing details or cancel your plan at any time in your dashboard. Refunds follow our billing policy and are subject to eligibility. Pricing may change with prior notice.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain sessions
• Store preferences
• Analyze usage
• Enhance functionality

Types of cookies:

• Essential: Required for login and core features
• Analytics: Help us understand user behavior
• Functional: Store settings and UI preferences

You can control cookies via browser settings or cookie banners (where applicable).

7. Data Retention

We retain data as long as:

• Your account is active
• Required by law or to resolve disputes
• Needed to provide the Service

You may request deletion of your account and associated data at any time.

8. Data Security

We take appropriate technical and organizational measures to protect your data, including:

• Encryption in transit and at rest
• Secure access controls
• Regular security audits

No method of transmission is 100% secure. Please keep your credentials confidential.

9. Your Privacy Rights

Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws:

• Access or export your personal data
• Correct inaccurate information
• Request deletion
• Object to processing
• Withdraw consent
• File a complaint with a supervisory authority

To exercise these rights, email us at privacy@replycomment.com

10. Data Processing Agreement (DPA)

We act as a data processor when handling your Facebook Page content. A Data Processing Agreement (DPA) is available upon request, outlining:

• Our obligations under GDPR/CCPA
• How we safeguard your data
• Subprocessor responsibilities

To request a signed DPA, contact legal@replycomment.com

11. Children's Privacy

Our Service is not intended for children under 13 (or under 16 in some regions). We do not knowingly collect information from children. If you believe a child has provided personal data, please contact us for removal.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or app notifications. Continued use of the Service after updates indicates your acceptance of the revised policy.

13. Contact Us

For any questions or requests regarding this Privacy Policy, contact:

Replycomment.com

• 📧 Email: support@replycomment.com
• 🌐 Website: https://www.replycomment.com
• 📄 DPA Inquiries: legal@replycomment.com