Privacy Policy

1. Introduction

ReplyMine ("we", "our", "the Service") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using the Service, you agree to the collection and use of information as described here.

2. Information We Collect

Account Information

When you register, we collect your name, email address, and password. Your password is hashed using bcrypt before storage — we never store plaintext passwords.

Product & Preference Data

You provide your product name, description, and URL during onboarding. You also configure subreddits to monitor and keywords to match against. This data is stored to power the discovery features of the Service.

Reddit Post Data

The Service fetches publicly available Reddit posts from the subreddits you configure. We cache post metadata (title, body, author username, score, comment count, subreddit, and timestamp) to provide scoring and filtering. This is public information accessible to anyone on the internet.

Usage Data

We collect basic usage information such as login timestamps, feature interactions, and scan activity to improve the Service and troubleshoot issues.

Technical Data

Our servers automatically log IP addresses, browser type, and device information when you access the Service.

3. How We Use Your Information

• Service delivery: Authenticate your account, scan subreddits, match keywords, score posts, and display your dashboard.
• Transactional emails: Send account verification, password reset, and important service notifications.
• Service improvement: Analyze usage patterns to improve features, performance, and reliability.
• Security: Detect and prevent fraud, abuse, and unauthorized access.
• Legal compliance: Respond to lawful requests from law enforcement or regulatory authorities.

We do not use your data for advertising. We do not sell your personal information to third parties.

4. Third-Party Services

We use a limited number of third-party services to operate:

• Resend — for sending transactional emails (verification, password resets). Resend processes your email address to deliver these messages.
• Hosting provider — our application and database are hosted on cloud infrastructure. Your data is stored on servers located in the United States.

We do not share your personal data with Reddit. The Service reads publicly available Reddit content but does not transmit your account information to Reddit.

5. Data Retention

• Account data is retained for as long as your account is active. When you delete your account, we remove your personal data within 30 days.
• Cached Reddit posts are retained based on your plan (15 days for Starter, 30 days for Pro, 90 days for Scale). Posts older than your plan's retention window are automatically deleted.
• Usage and technical logs are retained for up to 90 days for security and debugging purposes.

6. Data Security

We take reasonable measures to protect your data, including:

• Encryption in transit via HTTPS/TLS.
• Password hashing with bcrypt (we never store or transmit plaintext passwords).
• Secure, authenticated sessions using encrypted JWT tokens.
• Access controls limiting data access to authorized systems.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information via your account settings.
• Deletion: Delete your account and associated data from the Settings page, or by contacting us.
• Data portability: Request an export of your data in a machine-readable format.
• Opt-out: Unsubscribe from non-essential emails at any time using the link in each email.

To exercise any of these rights, contact us at privacy@replymine.com. We will respond within 30 days.

8. Cookies

The Service uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. You can control cookie behavior through your browser settings, but disabling essential cookies may prevent you from using the Service.

9. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To submit a request, contact privacy@replymine.com.

11. International Users

The Service is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer. For users in the European Economic Area, we rely on contractual necessity and legitimate interests as our legal basis for processing.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.

13. Contact

If you have questions or concerns about this Privacy Policy, contact us at privacy@replymine.com.