Privacy Policy

1. Who we are & scope

ReplyRoute ("we", "us") provides an AI-powered cold email platform that helps you find prospects, generate personalized emails, send from your connected Gmail accounts, and manage replies. This policy covers information we handle when you use the ReplyRoute website and application.

2. Information we collect

• Account information: email address, name, and authentication data you provide when signing up or signing in with Google.
• Sender profile: company name, physical mailing address, signature, opt-out line, timezone, and sending preferences you configure.
• Connected Gmail accounts: the email address and profile metadata of each Gmail or Google Workspace account you connect, plus the encrypted OAuth connection needed to send and read replies on your behalf.
• Prospect data: contacts you upload, import, or find through Prospect Finder — names, email addresses, companies, websites, titles, and any notes or personalization angles.
• Campaign & email content: campaign settings, generated and approved emails, follow-up steps, and send history.
• Reply metadata: replies received in your connected Gmail accounts related to campaigns you send through ReplyRoute, and our classification of those replies (positive, neutral, opt-out, bounce, etc.).
• Usage data: basic logs needed to operate the service and diagnose issues.

3. How we use your information

• To run your cold email campaigns end-to-end.
• To generate personalized email drafts and classify replies using AI.
• To send emails through your connected Gmail accounts and stage follow-ups.
• To detect replies and stop follow-ups when a prospect replies, opts out, or bounces.
• To enforce your suppression list across every campaign.
• To secure the service, prevent abuse, and comply with law.

4. Gmail data handling

We access Gmail through Google OAuth strictly to send from and read replies to the Gmail accounts you explicitly connect. We do not sell Gmail data, we do not use Gmail content to train generalized machine learning models, and we do not share Gmail content with third parties beyond what is required to provide the service. You can disconnect any Gmail account at any time from the Gmail Accounts page, which revokes our access and removes the stored connection.

5. AI processing

Email drafts and reply classification are processed by our AI provider on your behalf. Prospect and email content is sent to the AI provider only as needed to generate or classify a specific message.

6. Subprocessors

• Lovable Cloud — application hosting, database, and authentication.
• Google (Gmail API) — sending mail from and reading replies to your connected Gmail accounts.
• AI provider — email generation and reply classification.

7. Data retention & deletion

We retain your data while your account is active. If you delete your account, we remove your prospects, campaigns, generated emails, and connected Gmail accounts. Some records may be retained briefly in backups or where required by law.

8. Your rights

You may request access to, correction of, export of, or deletion of your personal information by contacting us at the address below. Depending on your location, you may have additional rights under GDPR, CCPA, or other applicable laws.

9. Cookies

ReplyRoute uses session cookies for authentication. We do not use tracking pixels in the emails you send through the platform.

10. Children

ReplyRoute is not intended for users under 16 and we do not knowingly collect data from them.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

12. Contact

Questions or requests: support@replyroute.com.