RepFlow Privacy Policy

Last updated: October 6, 2026

RepFlow creates draft replies to Google reviews. It does not publish replies automatically.

Email sign-in

If you choose email verification, your email is sent to Brevo or Resend to deliver a one-time code. It is not sent to Groq. RepFlow stores a salted hash of your email linked to your credit balance, rather than the address itself. Codes expire after 10 minutes; hashed challenges are deleted after 24 hours and sign-in sessions expire after 90 days. This identity remains linked to your account so reinstalling does not renew your verified trial. Contact repflow58@gmail.com for account deletion.

Data processed

When you request a draft, RepFlow processes the visible review text and star rating, the Google business name, and the reply preferences, business facts, restrictions, and escalation contact you choose to save. The extension also processes a license credential, quota usage, and whether a draft was generated, copied, or inserted.

Purpose and service providers

This data is used only to generate and safely deliver review-reply drafts, enforce licenses and quotas, prevent abuse, and operate billing. Requests are handled by RepFlow on Cloudflare; review-generation content is sent to Groq; subscription payments are handled by Lemon Squeezy. Brevo delivers subscription-trial reminders using the billing email retrieved from Lemon Squeezy. RepFlow does not retain an additional copy of that email; trial dates and reminder delivery status are stored with billing records. RepFlow does not sell personal data or use it for advertising.

For abuse prevention, Cloudflare processes the request IP address and user-agent. RepFlow keeps a salted network hash for up to 90 days; this is not a browsing history or a location-tracking feature. Billing records include order and subscription identifiers, payment status and plan allowances. Card details are handled by Lemon Squeezy and are not stored by the extension.

Storage and retention

Extension preferences are stored locally in your browser. Generated drafts may be retained on the server for up to 24 hours so interrupted requests can be recovered. Request metadata and copy/insert indicators may be retained for up to 90 days. Account, license, and subscription records are retained while needed to provide the service, prevent fraud, resolve billing issues, and meet legal obligations.

Your choices

You can review and edit every draft before using it. You may remove locally stored settings by removing the extension. Verified trial credits can be restored by email code. Paid access can also be recovered with the Lemon Squeezy license key supplied with the order.

Security and changes

RepFlow limits access to stored credentials and validates billing events cryptographically. This policy may be updated when the service or its providers change.