Privacy Policy

Last updated: October 30, 2026 (draft)

Draft, not legal advice. This policy was written in plain language as a starting point and has not been reviewed by a lawyer. A lawyer review is recommended before relying on it.

1. Who we are

ReplyNeighbour is operated by Tauheed Jalal Ahmed, 21306 61 Ave NW, Edmonton, AB T6M 0J9, Canada. We're responsible for the personal information described here. Our privacy officer is Tauheed Jalal Ahmed (owner), and you can reach them at hello@replyneighbour.ca.

2. What we collect and store

• Account details: your email address and your password. We store the password only as a salted, one-way hash (PBKDF2), never in readable form.
• Brand profile: your business name, tone, sign-off, things to always or never say, and your refund or compensation policy, if you enter one.
• Plan and usage: your plan, number of locations, how many replies you've used this month and in total, and when you created your account.
• Billing references: your Stripe customer and subscription IDs. We don't receive or store your full card number.
• Sign-in sessions: a random session token linked to your account, which expires after 30 days or when you log out.
• Reviews and drafts: the review text, star rating and reviewer first name you paste, and the drafts the AI writes. These are sent to our AI provider to write your drafts. We don't save them in our database. If a draft is blocked by our safety checks, a short excerpt may appear in temporary error logs that are deleted automatically within days.
• Basic technical logs: our hosting provider handles normal web request information, such as IP address, browser type and time, to deliver the site and protect it from abuse.
• Emails: messages you send to hello@replyneighbour.ca.
• Done-for-you only: Manager access to your Google Business Profile, which you grant to hello@replyneighbour.ca. Through it, we can see your profile, reviews and replies. We also keep the reply guidelines you give us, the suggested replies we email you for approval, and your answers.

3. Why we use it

• to run your account, write your reply drafts and apply your brand profile;
• to enforce plan limits and fair use, and to keep the service secure;
• to bill your subscription through Stripe;
• on Done-for-you, to read and reply to your Google reviews for you, and to email you suggested replies to approve before we post them;
• to answer your messages and tell you about important changes to the service, these terms or your plan.

We don't sell or rent your personal information, and we don't use it for advertising. We only use it for these purposes, unless you agree to something else or the law requires it.

4. Who processes it for us

• Stripe handles payments and card details. We never see your full card number. Stripe may store data in the United States and elsewhere.
• Cloudflare hosts the website and database and runs the AI model that writes drafts. Your data may be stored or processed outside Canada, including in the United States. Cloudflare says it doesn't use this content to train AI models.
• Zoho provides our email (hello@replyneighbour.ca), hosted in its Canadian data centre.
• Google: on Done-for-you, replies are posted on Google, under Google's own privacy policy.

When data is stored or processed outside Canada, the laws of those countries apply to it, and authorities there may be able to access it. To ask about how our service providers outside Canada handle personal information, contact our privacy officer.

5. Your consent and your rights

We follow Canada's private-sector privacy law (PIPEDA) and Alberta's Personal Information Protection Act, where it applies. By creating an account, you agree that we can collect and use your information as described here. You can withdraw that consent at any time by deleting your account, though we then can't provide the service.

You can ask to see the personal information we hold about you, ask us to correct it, or ask what we've done with it. Email hello@replyneighbour.ca. We'll reply within 30 days.

6. How long we keep it and how to delete it

• We keep your account details until you delete your account or ask us to.
• Delete it yourself: in the app, open Account and choose "Delete my account and all data". This immediately removes your account, brand profile, usage records and sign-in sessions from our database and cancels any subscription.
• Deleted data may remain in our hosting provider's automatic database backups for up to 30 days before it's overwritten.
• Stripe keeps payment and invoice records, and we may keep billing records for as long as tax and accounting laws require (generally 6 years in Canada).
• When a Done-for-you subscription ends, we remove our Manager access to your Google Business Profile. Replies we've already posted stay on Google unless you delete them.
• You can also email us to ask us to delete your data.

7. Security

We protect your information with HTTPS everywhere, hashed passwords, secure HttpOnly sign-in cookies, limited access to our systems, and payment handling by Stripe. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we'll notify you and the regulator as the law requires.

8. Cookies

We use one cookie: a session cookie (sid) that keeps you signed in. We don't use advertising, analytics or tracking cookies, and we don't use third-party trackers. Stripe's checkout page, on stripe.com, sets its own cookies under Stripe's policy.

9. Children

ReplyNeighbour is for businesses and isn't intended for anyone under 18.

10. Changes to this policy

We may update this policy. We'll change the "Last updated" date. If a change is significant, we'll let account holders know by email or on the site before it takes effect.

11. Questions and complaints

Please contact our privacy officer at hello@replyneighbour.ca first, and we'll try to resolve your concern. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.