The short version: We collect only what we need to run Own The Reply. We never sell your data. We never share it with advertisers. You can delete your account and all associated data at any time.

Contents
  1. Who we are
  2. What information we collect
  3. How we use your information
  4. Google account and Business Profile data
  5. How we share your information
  6. How long we keep your data
  7. How we protect your data
  8. Your rights and choices
  9. Cookies and tracking
  10. Children's privacy
  11. Changes to this policy
  12. Contact us

1. Who we are

Own The Reply ("we", "us", "our") is a software-as-a-service product that helps small business owners respond to Google reviews using AI. When this policy refers to "Own The Reply", it refers to the product and the company operating it.

Our website is ownthereply.com. You can contact us at privacy@ownthereply.com for any privacy-related questions.

2. What information we collect

Information you give us directly

Information we collect automatically

Information from Google

When you connect your Google Business Profile, we receive and store certain data from Google. This is explained in detail in Section 4 below.

3. How we use your information

We use the information we collect for the following purposes:

We do not use your data to train AI models. Your business information, review data, and generated replies are not used to train or improve any AI model — including the Anthropic Claude model we use to generate replies.

4. Google account and Business Profile data

Own The Reply connects to your Google Business Profile using Google's official OAuth 2.0 authorisation flow. When you connect your Google account, we request the following permission:

What we access

What we do not access

How we store Google tokens

We store your Google OAuth access token and refresh token securely in our database to enable ongoing access to your reviews. These tokens are used solely to fetch reviews and post approved replies. We refresh the access token automatically when it expires. You can revoke our access at any time by disconnecting your Google account in Own The Reply's Settings page, or directly in your Google Account security settings at myaccount.google.com/permissions.

Our use of Google data complies with Google's policies

Own The Reply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we share your information

We do not sell your personal data. We do not share your data with advertisers. We share your information only in the following limited circumstances:

Service providers

We work with a small number of trusted third-party service providers who process data on our behalf:

Legal requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

Business transfers

If Own The Reply is acquired by or merged with another company, your information may be transferred as part of that transaction. We will notify you by email and provide a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

6. How long we keep your data

7. How we protect your data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. If you become aware of any security vulnerability in our service, please contact us immediately at security@ownthereply.com.

8. Your rights and choices

You have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@ownthereply.com. We will respond to all legitimate requests within 30 days.

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@ownthereply.com.

European residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) including the right to access, rectify, erase, restrict, and port your data, and the right to lodge a complaint with your local supervisory authority. Our legal basis for processing your data is the performance of our contract with you (providing the Own The Reply service) and our legitimate interests in operating and improving the service.

9. Cookies and tracking

We use a minimal number of cookies necessary to operate the service:

We do not use advertising cookies, tracking pixels, or third-party analytics services that follow you across the web. We do not use Google Analytics, Facebook Pixel, or similar tracking technologies.

10. Children's privacy

Own The Reply is a business tool intended for use by adults aged 18 and over. We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@ownthereply.com and we will delete that information promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email at least 14 days before the change takes effect, and we will update the "Last updated" date at the top of this page.

Your continued use of Own The Reply after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you may delete your account before the effective date.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

We take privacy seriously and will respond to all enquiries within 5 business days.