Privacy Policy
Last updated: July 23, 2025
This Privacy Policy describes Our policies on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
Words with capitalized initials have meanings defined under the following conditions. The definitions shall have the same meaning regardless of singular or plural.
Definitions
- Account – unique account created for You to access our Service.
- Company – BNT Enterprise, 6 rue d’Armaillé, PARIS 75017.
- Cookies – small files placed on Your device containing browsing history.
- Country – France.
- Device – any device that can access the Service.
- Personal Data – information relating to an identified or identifiable individual.
- Service – the Website.
- Usage Data – automatically collected data (e.g. duration of page visits).
- Service Provider – any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, or assist the Company in analyzing how the Service is used. For example, OpenAI is a Service Provider we use to generate AI-based responses to Google reviews.
- Website – ProReply AI, accessible from https://www.proreplyai.com.
- You – individual or legal entity accessing the Service.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
May include:
- Email address
- Usage Data
Usage Data
We collect certain usage data related to your interactions with the Service, including:
- Authentication information provided via Google OAuth (e.g. email address)
- Google Business Profile data (locations, business names)
- Customer reviews posted on your Google listings
- AI-generated responses to those reviews
- Timestamps and basic usage events (e.g. when a response is generated)
Cookies and Tracking Technologies
Cookies can be “Persistent” (remain after browser closes) or “Session” (deleted after browser closes).
We use cookies only where strictly necessary to provide core functionality.
Specifically, we use a single session cookie to manage user authentication via Google OAuth. This cookie is essential for securely identifying you once logged in.
| Cookie Type | Purpose |
|---|---|
| Essential Authentication Cookie | Used to authenticate users securely during their session. |
Local Storage
We use your browser’s local storage to store non-personal preferences such as:
- Language – to remember your preferred interface language.
- Currency – to display prices or monetary values in your chosen currency.
This data is stored locally on your device and is not transmitted to our servers. It is used solely to enhance your experience while using the Service.
Use of Your Personal Data
- Provide, operate, and maintain the Service
- Authenticate and manage Your Account
- Retrieve and manage Google Business Profile data (reviews, locations)
- Generate AI-powered responses to your customer reviews
- Respond to your inquiries and support requests
- Improve the Service through usage analysis
Third-Party Services
We may share certain personal data with third-party service providers who help us deliver core functionalities of our Service. These providers act as data processors and are contractually bound to protect your data and use it only for the intended purpose.
- OpenAI – We use OpenAI’s API to generate customized responses to Google reviews you receive. Review content is temporarily processed by OpenAI’s servers for this purpose only. No data is stored by OpenAI beyond the duration of processing, and we do not allow OpenAI to use your data for model training.
- Google (OAuth & Business API) – We connect to your Google account with your consent to access your Google Business Profile data (locations, reviews, etc.).
These third parties are based in the United States and are subject to contractual safeguards to ensure adequate data protection, such as Standard Contractual Clauses approved by the European Commission.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction, in accordance with applicable privacy laws. You will be notified before such a transfer takes place.
Law Enforcement
Under certain circumstances, the Company may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or government agency).
Other Legal Requirements
The Company may disclose your personal data in good faith where such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing related to the Service
- Protect the personal safety of users or the public
- Protect against legal liability
Retention, Transfer & Deletion
Retention
We retain your personal data only for as long as necessary to provide our Service, fulfill the purposes described in this policy, and comply with applicable legal obligations. Once data is no longer needed, it is securely deleted or anonymized.
Transfer
We do not transfer personal data manually or for storage purposes. However, in order to provide key features of the Service, such as AI-generated review replies, some data (e.g. review content) may be temporarily processed by third-party services outside the European Economic Area (EEA), including OpenAI, based in the United States.
These transfers are protected by appropriate safeguards, including the use of Standard Contractual Clauses (SCCs) as approved by the European Commission.
Delete Your Personal Data
You may request the deletion of your personal data at any time via your account settings or by contacting us directly. We will process your request unless retention is required for legal or legitimate business purposes.
Security of Your Personal Data
We take data security seriously and implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.
These include the use of secure HTTPS connections, encrypted authentication tokens, limited access to production systems, and strict access controls. However, while we take all reasonable steps to protect your data, no method of transmission over the Internet or electronic storage is entirely secure.
Children’s Privacy
Our Service is intended for use by business professionals and is not directed at individuals under the age of 16. We do not knowingly collect personal data from anyone under 16 years of age.
If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately. We will take steps to delete such information as quickly as possible.
Links to Other Websites
Our Service may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to their site.
We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the “Last updated” date at the top.
Changes will become effective as soon as they are published, unless stated otherwise. We encourage you to review this page periodically to stay informed of any updates.
If changes are significant, we may notify you directly via email or through an in-app notice.
Contact Us
If you have any questions, please contact us by visiting https://www.proreplyai.com/en/contact.