1. Controller
AutoReplied is operated by SAS TIGREDO. For questions or requests about your data, email support@dolvia.com.
2. Data we process
We process only the data needed to operate the service:
- your account identifier, email address and language;
- public information from the connected Google Business listing;
- Google reviews, ratings, text, media, dates and replies;
- your drafts, “Ignore” or “Later” decisions and history;
- your subscription status and technical transaction identifiers;
- your automatic reply settings and your device’s technical notification token.
AutoReplied never receives your Google password or bank details. Notifications contain no customer name or review text.
3. AI drafts
Generation is optional and enabled only after your explicit consent. When you consent, AutoReplied sends the provider configured by TIGREDO, currently OpenRouter (and the selected model provider), only the public listing name, rating and review text. The separate field containing the reviewer’s profile name is not sent, but free-form review text may contain information entered by the reviewer. For a new one- or two-star review, up to three recent examples from the same listing may be added; they are limited and pseudonymized or redacted (contact details, URLs, customer identifiers, and reasonably detectable names or personal information).
No private message, tone profile, website content, customer memory or data from another product is sent. Without consent, no review data is transferred to AI and no response is generated. You may browse the app and view your reviews without enabling AI, but no new manual reply can be drafted or published without the required consent. A reply already published may still be manually edited or deleted where available, without re-enabling AI. Requested publication and review synchronization are part of the service. You may withdraw consent at any time in Settings; withdrawal prevents new generation and disables automatic mode. Replies already published remain on your Google listing, and their possible deletion does not depend on this consent.
4. Providers
- Supabase: authentication, database and server functions;
- Google: direct Google Business connection and review/reply transport;
- RevenueCat and Apple: purchase, restoration and subscription status;
- Expo: app build and notification delivery;
- OpenRouter and the selected model provider: optional draft generation.
These providers receive only the data needed for their work and operate under their own security and privacy commitments.
5. Purposes and legal bases
We use data to connect and synchronize your Google Business listing, display and classify reviews, prepare and publish replies according to your settings, manage quota and subscription, secure the service and answer requests. Transfer to AI and generation rely on your explicit, revocable consent. Display, synchronization and requested publication are part of the service and performance of the contract. Other processing strictly needed for the service relies on the contract; accounting obligations and abuse prevention may rely on a legal obligation or TIGREDO’s legitimate interest.
6. Retention
Account, review, draft and settings data are retained while you use the service and then deleted on request, subject to legal obligations. Data sent to OpenRouter and the model provider follow their own published retention periods and terms; AutoReplied does not promise retention or deletion it cannot control. Completed notifications are purged after 30 days and RevenueCat technical events after 90 days. Reviews and replies held by Google remain under the control of your Google listing.
7. Your rights
You may request access, rectification, portability, restriction, objection or erasure of your data. You can delete your account immediately from the app or follow our deletion procedure. You may also complain to the CNIL or your local data protection authority.