Privacy Policy

Last updated: July 24, 2026

ReplySmith is a web app and a companion browser extension that draft replies to reviews and comments using Google's Gemini API. This policy covers both. The short version: there is no server, no account, and no tracking — everything stays on your device except the one request you explicitly send to Gemini.

What data ReplySmith handles

ReplySmith stores the following, only in your own browser (via localStorage on the web app, or chrome.storage.local in the extension):

Your Gemini API key, which you provide yourself
Your business or creator profile fields (name, type, brand/creator voice, content type, default reply language)
Reviews or comments you paste or select, and the drafted replies, for as long as they're on screen or until you clear them

None of this is sent to us, because there is no backend to send it to. ReplySmith has no server, no database, and no analytics of any kind.

What gets sent to Google's Gemini API

When you generate a reply, your browser calls generativelanguage.googleapis.com directly, using your own API key. The request includes the review/comment text and the profile fields needed to draft a matching reply (e.g. business name, brand voice). That request goes straight from your browser to Google — it never passes through any server we operate, because none exists. Use of the Gemini API is subject to Google's own terms and privacy policy, not ours.

What the browser extension can access

The extension requests only:

storage — to save your settings locally, as above
contextMenus — to add the "Draft a reply with ReplySmith" right-click item
activeTab + scripting — to read the text you selected and show the drafted reply in an on-page overlay, only in the specific tab you right-clicked in, only at the moment you invoke it
host access to generativelanguage.googleapis.com — to call Gemini
host access to business.google.com — to show an optional one-click "Generate reply" button next to reviews on that specific dashboard

The extension does not request broad access to every website you visit, does not run in the background reading pages you haven't interacted with, and does not log in to, scrape, or auto-post to any site on your behalf. You always click the platform's own submit button yourself.

What ReplySmith never does

No accounts, no sign-in, no passwords
No cookies, no analytics, no crash reporting, no third-party trackers
No selling, sharing, or storing your data on any server — there isn't one
No automated posting or scraping of any website

Data retention and deletion

Everything ReplySmith stores lives in your browser's own storage. Clearing it (via the app's own "Clear" controls, your browser's site data settings, or by uninstalling the extension) deletes it completely and immediately — there is no copy anywhere else to delete.

Children's privacy

ReplySmith is a productivity tool intended for business owners and content creators, not for children, and does not knowingly collect data from children.

Changes to this policy

If this policy changes, the date above will be updated and the new version posted at this same address.

Contact

Questions about this policy or the project can be raised via GitHub Issues.