Privacy Policy

Last updated: May 2026

ReplyNest (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our Service at replynest.com. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

  • Email address — collected when you sign up for the Service.
  • Airbnb listing information — listing IDs, names, descriptions, and other listing metadata you connect to the Service.
  • Payment information — billing details are processed directly by Stripe; we do not store your card number.

1.2 Information Collected Automatically

  • Review content — guest reviews posted to your connected Airbnb listings, retrieved via the Airbnb API or scraping on your behalf.
  • AI-generated reply drafts — the reply content our system generates and posts.
  • Usage data — log files, IP addresses, browser type, pages visited, and interaction timestamps to operate and improve the Service.
  • Cookie data — session identifiers and analytics beacons as described in our Cookie Policy.

2. How We Use Your Information

  • To provide the Service — processing your listings, detecting reviews, generating replies, and posting them on your behalf.
  • To improve our AI models — we may use anonymized, aggregated interaction data (reviews and reply outcomes) to train and fine-tune our AI systems. We will not use personally identifiable listing data without anonymization.
  • To send transactional emails — account confirmations, trial reminders, billing receipts, and service notifications.
  • To communicate service updates — feature announcements and important policy changes.
  • To prevent fraud and abuse — monitoring for violations of our Terms of Service and applicable laws.

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

3. Third-Party Services

We share data with the following third-party providers only to the extent necessary to deliver the Service:

Stripe

Processes subscription payments. Your payment card data is stored and processed directly by Stripe under their Privacy Policy. We receive only metadata such as payment status and customer email.

Vercel

Hosts the ReplyNest web application and API. Request logs, including IP addresses, may be retained by Vercel under their Privacy Policy.

OpenAI

Powers our AI reply generation. Review text and contextual listing information is sent to OpenAI’s API to generate reply drafts. OpenAI’s API usage policies prohibit using submitted data to train their general models by default.

We may disclose your information to law enforcement or regulators when required by law, or to protect the rights, property, or safety of ReplyNest, our users, or the public.

4. Data Retention & Deletion

We retain your personal data for as long as your account is active or as necessary to provide the Service. If you cancel your subscription, we will retain your data for up to 90 days to allow for reactivation, after which it is deleted from our systems.

Requesting deletion: You may request deletion of your personal data at any time by emailing support@replynest.com with the subject line “Data Deletion Request.” We will process your request within 30 days. Note that we may retain certain data where required by law or for legitimate business interests such as fraud prevention.

5. Cookies

We use cookies and similar tracking technologies for session management and analytics. We do not use third-party advertising cookies. For details, see our Cookie Policy.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage for sensitive data, and access controls limiting who can view your data. However, no system is perfectly secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords.

7. Your Rights — GDPR & CCPA

GDPR (EU/EEA Users)

If you are located in the European Economic Area, you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure — request deletion of your personal data (“right to be forgotten”).
  • Restriction — request that we restrict processing of your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to certain processing activities.

CCPA (California Users)

If you are a California resident, you have the right to:

  • Know what personal information we collect and how it is used.
  • Request deletion of your personal information.
  • Opt out of the sale of your personal information (we do not sell personal information).
  • Non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at support@replynest.com. We will respond within 30 days.

8. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

10. Contact

For privacy-related questions or to exercise your rights, contact us at: support@replynest.com