Last updated: July 2026
Reply Review Return LLC ("R3," "we," "us") provides an automated Google review reply service. This policy describes what information we collect, how we use it, and the choices you have. It applies to our website, application, and services at replyreviewreturn.com and associated app domains.
Account information. When you sign up we collect your email address and billing information. Payments are processed by Stripe; we do not store your full card number.
Google Business Profile data. When you connect your Google Business Profile, you authorize us (via Google OAuth) to access your business profile on your behalf. We access and store: your business location names and identifiers, the reviews left on your profiles (review text, star rating, and date), and the replies posted. We store the OAuth refresh token that authorizes this access in encrypted form (AES-256-GCM).
Preferences. Settings you choose, such as reply tone, length, sign-off, contact details you want included in replies, and posting-hour windows.
We use the Google Business Profile data you authorize solely to provide the service you signed up for: reading new reviews on your connected profiles and posting replies to them on your behalf, according to the settings you control. Review text is sent to our AI provider (OpenAI) only to generate the reply for that review. We do not use your Google data for advertising, we do not sell it, and we do not share it with third parties except the service providers necessary to operate R3 (hosting, database, payment processing, and AI reply generation), each bound to use it only to provide their service to us.
R3's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can pause or stop automated replies at any time from your dashboard, edit or dismiss any proposed reply, edit replies after posting, and cancel your subscription in one click. You may revoke R3's access to your Google account at any time from your Google account's security settings, which immediately prevents any further access. To request deletion of your account and stored data, contact us at the address below and we will delete it within 30 days.
We retain your data while your account is active. OAuth tokens are stored encrypted; access to production systems is restricted. A log of reviews and replies is kept to prevent duplicate replies and to show you your reply history.
We may update this policy and will post the current version at this address. Questions or requests: brandonvagt@replyreviewreturn.com · Reply Review Return LLC, Tennessee, USA.