Privacybelied

NowReply ("we", "us") helps hospitality business owners reply to their Google reviews. We take your privacy seriously and handle personal data carefully. This policy explains what data we process, why, for how long, and what your rights are.

1. Who is responsible?

NowReply is a trading name of Cool Drinks B.V., registered at Spoorlaan 5 J 8, 2495 AL The Hague, the Netherlands. Dutch Chamber of Commerce number 27354756, VAT number NL821286572B02. Contact: privacy@nowreply.app.

2. What data do we process?

• Account data: email, name and profile photo (via your Google login).
• Business data: name, address and contact details of your location as registered in your Google Business Profile.
• Review data: reviews on your Google Business Profile (reviewer name, rating, text and date). Read directly from Google.
• Replies you send: the text of the responses you submit via NowReply to Google.
• Waitlist: if you sign up, we store name, email and venue name.
• Technical logs: limited debugging logs. Kept at most 30 days.

3. Why do we process this data?

• To give you access to your own Google reviews (performance of the contract).
• To generate AI-drafted replies (performance of the contract).
• To post replies via Google's API.
• To inform you of launch or significant updates (legitimate interest).
• To improve the service and investigate errors.

4. Who do we share data with?

• Google LLC — for access to the Business Profile API.
• Anthropic PBC — for drafting replies with Claude. Anthropic does not use this data for model training.
• Vercel Inc. — application and website hosting.
• Stripe Inc. — payment processing.

We have a data processing agreement with each of these. We do not sell your data.

5. Retention

• Account data: while your account is active + 90 days after.
• Review data: not stored — read on demand.
• Sent replies: for the duration of your account.
• Waitlist emails: up to 12 months or until you unsubscribe.
• Technical logs: up to 30 days.

6. Your rights

Under the GDPR you have the right to access, correct or delete your data, to withdraw consent, and to file a complaint with your local data protection authority. Requests: privacy@nowreply.app. We respond within 30 days.

7. Security

All traffic is over HTTPS. We use OAuth for authentication and encrypted storage of credentials. We never see your Google password.

8. Changes

We may update this policy. Material changes are announced via email to users.