Privacy policy

This policy explains what ReplyDial (“we”, “us”) collects, why, how long we keep it, and the choices you have. ReplyDial is operated by ReplyDial (legal entity registration in progress, Sweden), which is the data controller. Questions or requests: contact@replydial.com.

1. The short version

• We collect the minimum needed to run a waitlist today and, once you connect a channel, to show you your unanswered comments and post the replies you approve.
• We never post anything to your channel unless you click Post, and we post your text exactly as you wrote it.
• We do not sell your data, show ads, or use your YouTube data to train AI models.
• You can disconnect and have your data deleted at any time.

2. Waitlist

When you join the waitlist we store:

• your email address, to tell you when access opens and to send occasional launch updates;
• optionally, the channel link you give us, to plan early access;
• the referral code that brought you here and campaign tags from the link you followed (for example utm_source), to credit referrals and understand which channels work;
• a salted, one-way hash of your IP address, used only to limit abusive signups. We do not store your raw IP address in the waitlist.

Legal basis: your consent (GDPR Art. 6(1)(a)) for email updates, and our legitimate interest (Art. 6(1)(f)) in preventing abuse. You can leave the waitlist at any time by replying to any of our emails or writing to contact@replydial.com; we then delete your entry.

3. When you connect a YouTube channel

The ReplyDial app uses YouTube API Services. By using it you also agree to the YouTube Terms of Service, and your data is also subject to the Google Privacy Policy.

What we access

• Your Google account’s basic profile (name, email address, profile picture) to sign you in.
• With your separate, explicit permission (the youtube.force-ssl scope): your channel’s identifier and title, your videos’ identifiers and titles, and the comments and replies on your videos (text, author display name and channel, timestamps, like counts).

What we do with it

• Show you which comments on your channel have no reply from you.
• Generate a draft reply to a comment when you ask for one, and detect viewer requests so you can collect them in a backlog.
• Post a reply to YouTube only when you explicitly click Post, using exactly the text you approved.
• Keep a record of the replies you posted through ReplyDial (an audit log), so you and we can verify what was sent.

AI processing

To draft a reply, the comment text, its author’s display name, and the video title are sent to our AI provider, Anthropic, which processes them solely to return the draft. Under Anthropic’s commercial terms this content is not used to train their models. We do not use your YouTube data to develop, improve, or train generalized AI or machine-learning models.

Limited Use

ReplyDial’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others except as needed to provide the features described here, to comply with law, or as part of a merger or acquisition with equivalent protections. No human at ReplyDial reads your comments or drafts unless you ask us to for support, it is needed for security or legal compliance, or the data is aggregated and anonymised.

Storage, retention, and deletion

• Your Google access and refresh tokens are encrypted at rest (AES-256-GCM) and never sent to your browser.
• Data obtained from YouTube API Services is refreshed or deleted at least every 30 days.
• Disconnecting your channel inside ReplyDial revokes our access and deletes your stored YouTube data and tokens. Deleting your account deletes everything associated with it, except records we are legally required to keep (such as invoices).
• You can also revoke ReplyDial’s access at any time from your Google Account’s security settings: security.google.com/settings/security/permissions.
• To request deletion of any data we hold about you, email contact@replydial.com. We respond within 30 days.

4. Cookies

We do not use advertising or cross-site tracking cookies. If you arrive through a referral link we set one first-party cookie, rd_ref, for 30 days so the person who invited you gets credit. When the app launches, a session cookie keeps you signed in. If we add privacy-friendly product analytics, this policy will be updated first.

5. Who processes data for us

We use a small number of service providers, under data-processing agreements, and only for the purposes above:

• Google Cloud (hosting and the managed PostgreSQL database, in the EU) and Google/YouTube API Services (sign-in and channel data)
• Resend (transactional and waitlist email)
• Anthropic (AI drafting, in the app only)
• A merchant of record for payments, once paid plans open (they handle your payment details; we never see your card number)

Some providers may process data outside the EU/EEA. Where they do, transfers rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

6. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time. Write to contact@replydial.com. You also have the right to lodge a complaint with your local data protection authority; in Sweden this is the Swedish Authority for Privacy Protection (IMY).

7. Children

ReplyDial is not directed at children under 16, and we do not knowingly collect their data.

8. Changes

If we change this policy in a way that affects how we use your data, we will tell you by email or in the app before the change takes effect. The date at the top shows the latest revision.

9. Contact

ReplyDial (legal entity registration in progress, Sweden)
Privacy requests and general contact: contact@replydial.com