Privacy Policy

Introduction

OpenReply ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and related services.

By installing and using OpenReply, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Email address — Used to create and identify your account
• Password — Securely hashed and stored for authentication
• Authentication tokens — Used to keep you logged in across sessions

Email Content (Temporary Processing)

To generate AI-powered replies, OpenReply temporarily processes email thread content from Gmail. This includes:

• Email body text and subject lines
• Sender and recipient names
• Thread context for generating contextual responses

Usage Data

We may collect limited usage data to improve our service:

• Number of AI replies generated
• AI model preferences
• Credit usage and balance

How We Use Your Information

Data Type	Purpose
Email address	Account creation, authentication, and communication
Password	Secure authentication
Email content	Real-time AI reply generation (not stored)
Usage data	Service improvement and billing

Data Sharing and Third Parties

We work with the following third-party services:

• AI Model Providers — Email content is sent to AI models via our OpenReply API to generate replies. These providers process data according to their own privacy policies. We do not share your identity with AI providers.
• Stripe — Handles payment processing. We never see or store your credit card details.

We do not:

• Sell your personal data to third parties
• Use your data for advertising purposes
• Share your data for creditworthiness or lending decisions
• Transfer your data for purposes unrelated to OpenReply's core functionality

Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
• Passwords are hashed using secure algorithms before storage
• Authentication tokens are securely generated and stored
• Email content is processed in memory and not persisted to disk

Data Retention

• Account data: Retained until you delete your account
• Email content: Not retained — processed in real-time and immediately discarded
• Usage logs: Retained for up to 90 days for service improvement

Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Update or correct your account information
• Deletion — Request deletion of your account and associated data
• Portability — Receive your data in a portable format

To exercise these rights, contact us at privacy@openreply.ai.

Chrome Extension Permissions

OpenReply requests the following Chrome permissions:

Permission	Why We Need It
storage	Save your login state, preferences, and settings locally
activeTab	Access Gmail tabs when you click the extension icon
scripting	Inject the AI reply functionality into Gmail
identity	Enable Google Sign-In authentication
Host permissions (mail.google.com)	Read email content for AI reply generation

Children's Privacy

OpenReply is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@openreply.ai
• Website: https://openreply.ai