Privacy Policy

1. Introduction

RevReply, Inc. ("the Company," "we," "us," or "our") operates revrepiy.com and the RevReply AI sales-reply automation service (collectively, the "Service"). RevReply was founded in Denver, Colorado in 2023 to help sales teams answer inbound leads instantly, in each rep's own voice, so no qualified opportunity sits waiting while the team works its backlog.

This Privacy Policy explains what personal information we collect through the Service, how we use it, who we share it with, and the rights available to you. It applies to information collected on revrepiy.com, through account sign-up and use, and through direct communications with us.

The Company is located at 3040 Blake Street, Suite 100, Denver, CO 80205. You may reach us at [email protected].

2. Information We Collect

2.1 Information You Provide

When you sign up for RevReply, contact us, or use the Service, you may provide:

• Account registration details: full name, work email address, company name, and password;
• Contact form submissions: name, work email, company, and any message content;
• Billing and payment information processed by our payment provider (the Company does not store raw card numbers);
• Voice-training data: past email replies you submit to train a rep's voice profile. This content is used solely to build and calibrate the voice model for that account and is not used for any other purpose.

2.2 Information Collected Automatically

When you visit revrepiy.com or use the Service, we automatically collect limited technical data:

• IP address and approximate location (city/region level, not precise coordinates);
• Browser type, operating system, and device class;
• Pages visited, referring URLs, and session duration;
• Cookie and local-storage identifiers (see our Cookie Policy).

2.3 Inbox and Email Data

The core function of RevReply involves connecting to your email inbox to monitor inbound lead threads and generate AI-drafted replies. When you connect an inbox, the Service reads incoming emails from senders you designate as lead sources. We process this content to generate reply drafts and to log activity in your account dashboard. We do not read email threads that fall outside your configured lead-identification rules.

Email content processed by the Service is used only to deliver the Service to you. We do not use inbox content to train models across accounts, to build advertising profiles, or to sell to third parties.

2.4 We Do Not Knowingly Collect Children's Data

revrepiy.com is a B2B tool directed at business professionals and is not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it promptly.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and improve the RevReply AI sales-reply automation service, including generating rep-voice email drafts and booking meetings on your behalf;
• Manage your account, authenticate your identity, and deliver customer support;
• Send transactional emails (account confirmations, password resets, service alerts) and, where you have opted in, product updates and announcements;
• Analyze aggregate usage patterns to improve reply accuracy and voice-matching quality;
• Detect and prevent fraud, abuse, or unauthorized access to the Service;
• Comply with our legal obligations under applicable US federal and Colorado law.

We do not sell personal information for monetary value. We do not use your inbox content or voice-training data to train shared or cross-account AI models without your explicit written consent.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf under contractual confidentiality terms, including cloud hosting providers, email infrastructure vendors, payment processors, and analytics services;
• Email and calendar integrations you explicitly authorize (such as Gmail, Outlook, Google Calendar, or Calendly) to enable the Service's core reply and booking functions;
• CRM integrations you connect on the Team plan (Salesforce, HubSpot) to sync lead activity logs per your configuration;
• Legal authorities, when disclosure is required by law, court order, or to protect the rights, safety, or property of the Company, our users, or others;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, maintain session state, and measure aggregate usage. For a full description of categories, lifetimes, and your opt-out options, see our Cookie Policy.

6. Data Retention

We retain personal account data for as long as your account is active and for a reasonable period afterward to allow account recovery and to meet legal or accounting obligations. Voice-training data and processed inbox content are retained for the duration of your subscription; you may request deletion at any time by contacting us. Inactive marketing-list contacts are purged after 24 months. Server access logs are retained 90 days, then aggregated.

7. Security

We use TLS encryption for data in transit, restricted-access databases, and least-privilege access controls. Inbox OAuth tokens are stored encrypted. No system is perfectly secure; we cannot guarantee absolute security and encourage you to use a strong, unique password for your RevReply account.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. Colorado Residents (CPA)

Because RevReply is headquartered in Denver, Colorado and serves Colorado-based businesses and residents, the following rights under the Colorado Privacy Act ("CPA") apply to Colorado residents with respect to personal data we control.

9.1 Your CPA Rights

• Right of Access: confirm whether we are processing your personal data and obtain a copy.
• Right to Correction: correct inaccuracies, considering the nature and purposes of processing.
• Right to Deletion: request deletion of personal data concerning you.
• Right to Data Portability: obtain a portable copy where technically feasible (up to twice per year).
• Right to Opt Out: opt out of (a) targeted advertising, (b) sale of personal data, and (c) profiling that produces legal or similarly significant effects.

9.2 Universal Opt-Out Mechanism

We honor browser-transmitted universal opt-out signals, including the Global Privacy Control ("GPC"), as a request to opt out of sale and targeted advertising. Configuring GPC in your browser is sufficient; no separate request is required.

9.3 How to Exercise

Submit a request by emailing [email protected]. We respond within 45 days; one 45-day extension is available where reasonably necessary, with notice.

9.4 Appeal

You may appeal a denial by replying to our response email. If we maintain the denial, you may contact the Colorado Attorney General at coag.gov.

9.5 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA/CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: