Privacy Policy

Last updated: 2026-06-14

ReplyAI (“we,” “our,” or “us”) operates the website replyai-virid.vercel.app (the “Service”). This page explains our policies regarding the collection, use, and disclosure of personal data when you use our Service.

1. Information We Collect

Usage Data

When you generate an email, we store the niche you entered and the AI-generated email content. This is stored to enable the shareable result feature and to count daily usage. We do not associate this data with a user account because no account is required to use the free tier.

Technical Data

Our hosting provider (Vercel) and rate-limiting service (Upstash) automatically collect your IP address, browser type, and access timestamps. The IP address is used solely for rate limiting — enforcing the 5-free-emails-per-day limit — and is not stored permanently by ReplyAI. Upstash retains rate-limit counters for 24 hours, after which they expire. Vercel may retain standard server logs per their privacy policy.

License Key Data

If you purchase a license key through Gumroad, we store the license key and the associated email address you provided to Gumroad. We do not receive or store your payment information — Gumroad handles all payment processing. You can review Gumroad’s privacy policy at gumroad.com/privacy.

Contact Data

If you email us, we retain your email address and message content to respond to your inquiry. We do not use this for marketing or add you to any mailing list.

2. How We Use Your Data

  • To generate and display AI-written cold emails based on your input.
  • To enforce the daily rate limit (5 free generations per day per IP address).
  • To validate license keys and provide unlimited access to paid users.
  • To create shareable result pages at /result/[id].
  • To improve the quality of our AI generation — we may review anonymized generated content to tune our system prompt.

We do not:

  • Sell your data to third parties.
  • Use your generated email content for any purpose other than displaying it to you and operating the shareable link feature.
  • Send you marketing emails (we don’t collect emails from free users).
  • Build advertising profiles.
  • Track you across other websites.

3. AI-Generated Content Disclaimer

ReplyAI uses Groq’s API (the Llama 3.3 70B model) to generate email content. The generated content is produced by an artificial intelligence system and may contain inaccuracies, fabricated information, or text that appears factual but is not. You are responsible for reviewing and editing any AI-generated email before sending it. ReplyAI is not responsible for the content of emails you send using text generated by our Service. We do not guarantee that generated emails will result in replies, conversions, or any specific business outcome.

4. Third-Party Services

Our Service relies on the following third-party providers. Each has its own privacy policy governing how it handles data:

  • Groq — Processes your niche input to generate email content. Per Groq’s API data usage policy, data sent through the API is not used to train their models. Privacy Policy
  • Supabase — Hosts our database (generated emails, license keys, share records). Privacy Policy
  • Upstash — Provides rate-limiting infrastructure. IP addresses are used as rate-limit identifiers. Privacy Policy
  • Vercel — Hosts and serves our website. Privacy Policy
  • Gumroad — Processes license key payments. Privacy Policy

5. Data Retention

  • Generated email content is retained indefinitely to support shareable result URLs. If you want a specific result removed, contact us at our contact page.
  • IP-based rate-limit counters expire after 24 hours.
  • License key records are retained for the duration of your subscription plus 30 days after expiration for reactivation purposes.

6. Cookies

We use no marketing, tracking, or advertising cookies. We set a functional cookie-like entry in localStorage to store your license key locally in your browser for convenience — so you don’t have to re-enter it on every visit. This data is not used for tracking and is never sent to our servers outside of thex-license-key header when you generate emails.

7. Your Rights

Depending on your jurisdiction (including the GDPR in the EU/UK and the CCPA in California), you may have rights to access, correct, delete, or port your personal data, and to object to or restrict its processing.

To exercise any of these rights, contact us at our contact page. We will respond within 30 days. Since free-tier usage is not tied to a user account, please include your IP address and a timestamp range in your request so we can locate relevant data.

8. Children’s Privacy

Our Service is not directed at anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at our contact page and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes will be communicated via a notice on our homepage.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at: our contact page