Privacy policy

ReplySeal stores only what is required to manage and optimise your online presence: connection identifiers, your Google Business Profile listing data, and the accesses you grant us. Access to your Google listing is granted via Google's native manager role (not OAuth), so no Google password or token is held on your behalf. You can revoke our access (remove our agency account from your listing's managers) or delete your account at any time.

Data processors (subprocessors)

To deliver the service we rely on the following processors, each bound by a data processing agreement (GDPR Art. 28):

• Google (Ireland/USA) — Business Profile data. We manage and optimise your Google Business Profile (listing, description, posts) on your behalf via the Google Business Profile API, using the manager access you grant us.
• OpenAI (USA) — generates your GEO content (listing description, structured data, FAQ). Your business information is sent to generate content; not used to train models.
• Supabase (EU, Paris region) — database and authentication.
• Stripe (Ireland/USA) — payment processing.
• Vercel (USA) — application hosting.

Published content never exposes your clients' personal contact details. Questions: khalil@replyseal-ai.com