Privacy Policy

We collect information you provide directly to us, as well as information generated through your use of the OptiReply platform.

• Account information — Name, email address, business name, and password when you register
• Business profile data — If you choose to connect your Google Business Profile, we collect the business information you connect to OptiReply
• Review data — When you connect your Google Business Profile, we retrieve customer reviews from it. Where this integration is not yet available to you, review-related features operate using data you enter or import manually.
• Directly submitted feedback — Feedback, contact information, and reward-redemption details you or your customers submit directly through OptiReply's QR code and feedback tools, independent of any Google integration
• Usage data — How you interact with the platform, features used, and response history
• Billing information — Payment details processed securely through Stripe (we never store card numbers)
• Technical & infrastructure data — OptiReply does not store IP addresses, browser fingerprints, or similar technical identifiers within its primary application databases. Our cloud infrastructure and hosting providers may automatically process standard web server and network logs — including IP addresses, browser information, and access timestamps — solely for security, fraud prevention, diagnostics, service reliability, and operational monitoring.

We use collected information solely to operate, improve, and support the OptiReply platform.

• Provide and deliver core platform features including AI response generation
• Process payments and manage your subscription
• Send transactional emails (account alerts, billing receipts)
• Analyze aggregated usage patterns to improve platform performance
• Respond to support requests and inquiries
• Comply with legal obligations, including disclosures required by valid legal process, and to investigate fraud, security incidents, or protect the safety of our users

OptiReply's application and database infrastructure run on Google Cloud Platform, including Cloud SQL for PostgreSQL. Google Cloud Platform is certified to SOC 2 and ISO 27001 standards. Your information is stored and processed on servers located in the United States through our service providers.

Some of our service providers operate in the United States, and personal information processed there may be subject to lawful access requests by U.S. government authorities under applicable U.S. law. We carefully select our service providers and require appropriate contractual and organizational safeguards designed to protect your information consistent with applicable privacy laws.

• All data is encrypted in transit using HTTPS/TLS
• Database access is restricted to authorized systems only
• Passwords are hashed and never stored in plaintext
• Role-based access controls limit internal data exposure
• Payment processing is handled entirely by Stripe — we never store card data

We work with trusted third-party providers to deliver OptiReply's features. Each is contractually bound to protect your data.

• Google Cloud Platform — Application and database hosting, including Cloud SQL for PostgreSQL
• Stripe — Payment processing and subscription management
• Google APIs — Powers Google Business Profile integration where available
• AI providers (Anthropic, Google) — Generate review response suggestions and business insights. Personal data is shared with these providers only to the extent necessary to deliver the AI-powered features you request. We do not use your personal data or customer review data to train, fine-tune, retune, or improve either our proprietary AI models or any publicly available AI models.
• Resend — Transactional email delivery
• Google Analytics — Platform usage analytics

Where Google Business Profile functionality is available, OptiReply integrates with Google Business Profile APIs to retrieve and display your business reviews.

• Google data is accessed only with your explicit authorization
• We access only the minimum scopes required to deliver the service
• Google review data is never shared with third parties for advertising or profiling
• You can revoke OptiReply's access to your Google account at any time through your Google Account settings
• We do not use Google data to train AI models

We strictly adhere to the following:

• No Data Training — We do not use data obtained through Google Business Profile APIs to train, retune, or improve our AI models or any machine learning models.
• Internal Use Only — We only use the data to provide the services visible in our dashboard — responding to reviews and providing business insights.
• Human Oversight — All AI-generated responses are intended for human review and approval before being published to Google.
• No Unauthorized Transfer — We do not transfer Google API data to any third party except as necessary to provide our service.
• Minimal Scope — We request only the minimum permissions necessary to deliver OptiReply's core features.

For more information, see Google API Services User Data Policy.

As a user of OptiReply, you have the following rights over your data under applicable Canadian privacy law (PIPEDA) and international standards.

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate personal data
• Deletion — Request deletion of your account and associated data
• Portability — Request an export of your data in a portable format
• Withdrawal — Withdraw consent for data processing at any time

To exercise any of these rights, contact us at privacy@seven9it.com or visit our Data Deletion page.

We retain your data for as long as your account is active or as needed to provide services.

• Account data is retained for the duration of your subscription
• Most personal data — including reviews, business and location records, and account access data — is deleted immediately upon a verified deletion request
• Your core account and billing records are deactivated immediately and retained in a restricted, de-identified state for the period required by financial and audit regulations, after which they are permanently removed from active systems
• Data may continue to exist in backup systems for a period after removal from active systems
• Anonymized, aggregated analytics data may be retained indefinitely
• Billing records are retained as required by applicable financial regulations

OptiReply uses minimal cookies necessary for platform operation and analytics. We do not use cookies for interest-based or third-party advertising.

• Session cookies — Required for authentication and maintaining your logged-in state
• Analytics cookies — Google Analytics, used to understand platform usage patterns

You can disable cookies through your browser settings, though this may affect platform functionality.

OptiReply is a business tool intended for use by adults and businesses. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately.

We may update this Privacy Policy as our platform and practices evolve. Material changes will be communicated to active subscribers by email. The effective date at the top of this page reflects the most recent revision.

For privacy-related questions, requests, or concerns, please contact us: