Privacy policy

Who runs this

ReplyHey is run by a person. You can contact us at d@devkonic.com with questions, requests or complaints about anything on this page.

What the web app collects

Your account. Your email address and sign-in details, held by Clerk, our authentication provider. ReplyHey never sees or stores a password.

What you tell us to watch. The website addresses of your products, the keywords and subreddits you choose, and the settings on those.

Public posts we find for you. ReplyHey reads public posts on Reddit, X and LinkedIn that match your keywords, and stores the post title, the body, the public author name, the link and the time it was posted. This is public material, gathered from public pages and search interfaces. We do not collect anything from a private account, a private group or a direct message.

The drafts. The reply and the direct-message draft an AI model writes for each post, plus a relevance score and the short reason behind it.

Billing. Stripe handles your card. ReplyHey stores the subscription status and a Stripe customer ID, never a card number.

Usage and advertising. The replyhey.com website runs Dashi Metrics and Google Analytics, both of which record pages viewed, referrer and approximate region. It also carries the Reddit advertising pixel, and reports sign-ups and subscriptions back to Reddit Ads so we can tell which adverts worked. That is the one place a third party learns something about your visit for its own purposes, and it is confined to the public marketing pages and the sign-up flow. The browser extension carries none of it.

What the browser extension collects

Nothing, is the short answer. ReplyHey Autopilot has no analytics, no tracking and no server of its own. It talks to exactly one host, replyhey.com, and it stores everything it keeps in your own browser.

Held in your browser only(Chrome’s local extension storage, never uploaded anywhere but replyhey.com): your ReplyHey API key, the leads and drafts fetched for your account, the filters you picked, the delay you set between sends, and the last status line the panel showed you. Removing the extension deletes all of it.

Sent to replyhey.com: your API key, so the server knows whose leads to hand over; the ID of a lead you clicked Send on; and, afterwards, whether that send succeeded — and if it failed, which step failed and the error text. That last part is how we find out that Reddit has moved a button. It carries no page content.

Sent to Reddit, X or LinkedIn: the draft you chose, posted from the account that browser is already signed in to. That is the entire interaction. The extension never asks for a password, never signs in as you, never reads your feed, your messages or your other tabs, and never posts anything you did not click Send on.

The pages it can read. The extension can run on reddit.com, x.com and linkedin.com, because that is where a reply has to be typed. It only runs on a page it opened itself, for one lead, and it closes that tab when it is finished. It has no access to any other website.

Why we are allowed to hold it

To provide the service you asked for, which covers your account, your sites, your leads and your drafts; and our legitimate interest in keeping the product working and unabused, which covers error reports and basic analytics. If you are in the EEA or the UK, those are Article 6(1)(b) and Article 6(1)(f) respectively.

Who else sees it

Only the companies that run parts of the product, and only what each one needs: Clerk (sign-in), Neon (the database), Vercel and Hetzner (hosting and the scheduled fetches), Stripe (payments), Resend (the email digest), SocialCrawl and Scrape.do (reading the public posts), Google and OpenRouter (the AI models that score a post and draft a reply), and the analytics and advertising services named above. That is the whole list. We do not sell or rent your data to anybody.

How long it is kept

Your account data lasts as long as your account. Leads are kept while they are useful to you and are removed with the site they belong to. Delete a site in the app and its leads and drafts go with it, immediately. Ask us to close your account and everything else follows within 30 days, apart from what we must keep for tax and accounting.

Your choices

You can see, correct, export or delete your data — ask, and it is done. You can turn the email digest off in Settings. You can revoke an API key in Settings, which cuts off any extension or AI client holding it. You can remove the extension at any time, which deletes everything it stored. If you are in the EEA or the UK you also have the right to complain to your data protection authority.

Children

ReplyHey is a business tool and is not for anyone under 16.

Changes

If this page changes in a way that matters, the date at the top changes and existing customers get an email. Small corrections just move the date.

Back to ReplyHey