Privacy Policy

ReplySparks ("we", "us", "our") provides an AI-powered Chrome extension and web service that generates reply suggestions for social media platforms. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

When you use ReplySparks, we collect a minimal amount of information:

• Account data: your email address and an encrypted password hash, used to create and authenticate your account.
• Usage data: a monthly count of how many AI replies you have generated, so we can enforce the limits of your Free or Pro plan.
• Subscription data: if you upgrade to Pro, we store a Stripe customer identifier and your subscription status. We do not store your payment-card details.
• Reply context (transient): when you request an AI reply, the post and comment text you select is sent to our backend and to the AI provider to generate a response. We do not retain the original post or comment text after the reply is generated.

2. How We Use Your Information

• To provide, operate, and improve the ReplySparks service.
• To authenticate you and enforce your plan limits.
• To process subscription payments and send you transactional emails (e.g. password reset, billing).
• To detect abuse and comply with legal obligations.

We do not sell your personal data to third parties.

3. Service Providers

We rely on a small set of trusted third-party services to operate ReplySparks. Each one processes only the data needed to perform their function:

• Supabase — secure database and authentication infrastructure. Stores your email, hashed password, plan, and usage counts.
• Stripe — payment processing for Pro subscriptions. Card details are handled directly by Stripe and never touch our servers.
• Anthropic (Claude API) — generates the AI reply text. The post and comment you select are sent to Anthropic to produce a suggested reply. Anthropic does not use API inputs to train their models.

4. Data Retention

We keep your account data for as long as your account is active. You can request deletion of your account and associated data at any time by emailing support@kvittofy.se.

5. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, row-level database security, and least-privilege access controls. No system is perfectly secure, but we take protecting your data seriously.

6. Your Rights

Depending on your jurisdiction (e.g. GDPR in the EU, CCPA in California), you may have the right to access, correct, export, or delete your personal data. Contact us at support@kvittofy.se to exercise these rights.

7. Children

ReplySparks is not directed to children under 13. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above.

9. Contact

Questions about this Privacy Policy? Email support@kvittofy.se.