TheAutoReply by FrontDesk Global
Home Dashboard Demo Pricing FAQ Sign in
← Back to TheAutoReply

Privacy Policy

Effective May 7, 2026. Version 1.0.

This Privacy Policy explains how X3 E-Commerce LLC d/b/a FrontDesk Global (“FrontDesk Global”, “we”, “us”) collects, uses, and shares personal information in connection with TheAutoReply (the “Service”).

We have built TheAutoReply with three commitments: we do not sell personal information, we do not train AI models on customer data, and we treat all users — wherever they live — to the same baseline privacy rights.

1. Who is the Controller / Processor

When we provide the Service to you (our customer), you act as the “controller” of your customers' or tenants' personal information, and we act as a “processor” or “service provider” on your behalf, in the sense those terms are used in the GDPR, CCPA/CPRA, and similar laws.

When we collect personal information directly from you to manage our relationship with you (account, billing, support), we act as a controller. This Policy covers both relationships.

2. Information We Collect

2.1 Information you give us

  • Business profile details (name, address, hours, categories)
  • Review content and reviewer first names (Google's display fields)
  • Reply drafts and final approved replies
  • Brand voice samples and tone preferences

2.2 Account and billing information

  • Name, email address, phone number, business name and address.
  • Payment-method information processed by our payment provider, Stripe (we never see or store full card numbers).
  • Authentication credentials (passwords are stored hashed; we use OAuth where supported).

2.3 Information collected automatically

  • Device, browser, and connection metadata (IP address, user agent, language).
  • Usage logs (pages visited, actions taken, errors encountered).
  • Cookies and similar technologies — see Section 9.

3. How We Use Information

We use information to:

  • Provide and operate the Service, including the AI features described in our AI Disclosure.
  • Process payments and manage your subscription.
  • Communicate with you about your account, security, billing, and product updates.
  • Detect, prevent, and address fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our Terms.
  • Improve the Service through aggregated, anonymized analytics. We do not use the content of customer data to train AI models.

4. AI Processing

When we use AI to generate output, we send the relevant input to our AI provider (currently Anthropic, with select third-party speech and translation providers identified in our AI Disclosure). These providers process information solely to return output to us; they do not retain inputs to train their models on your data.

5. How We Share Information

We share information only as needed to operate the Service:

  • Sub-processors. We use trusted vendors for hosting, payments, email, SMS, AI inference, and analytics. A current list is available on request and is also linked from our website.
  • Your authorized integrations. We exchange data with services you connect (Google, Microsoft, your CRM, etc.).
  • Legal compliance. We may disclose information when required by law, valid legal process, or to protect rights, safety, and property.
  • Business transfers. If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you and any successor will be bound by this Policy.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

5A. Google Business Profile Data

When you connect a Google Business Profile to TheAutoReply, we access the following data via the Google Business Profile APIs, exclusively for the stated purposes:

  • Reviews (text, star rating, reviewer first name as displayed by Google, timestamp) — read to allow our AI to draft reply suggestions for your approval.
  • Reply status and content — written only when you, the owner, explicitly approve a draft. Auto-publishing is opt-in per star-rating threshold; you can disable it at any time.
  • Business Profile metadata (name, address, categories, hours) — read to give the AI context for drafting on-brand replies.
  • Account ownership/management status — verified once at connection time so we can confirm you have the right to operate on the profile.

What we do not do with your Google Business Profile data:

  • We do not store, sell, or transfer Google Business Profile data to any third party other than sub-processors strictly necessary to operate the Service (listed under section 5).
  • We do not use Google Business Profile data, including review content, to train or improve AI models — ours or our vendors'.
  • We do not use Google Business Profile data for advertising, lead generation, or marketing to any party other than you.
  • We do not access location insights, performance metrics, or any GBP data beyond what is required to draft and post review replies on your behalf.

Revocation: You can disconnect your Google Business Profile from TheAutoReply at any time, either from your TheAutoReply dashboard or from your Google account's connected-apps page. Upon revocation we stop accessing your Google data immediately, and within 30 days we delete cached review content and reply history from our systems, except where retention is required by law.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Retention

We retain Your Content for as long as your account is active. After termination, we retain it for at least 30 days to support export, then delete it within 90 days unless we are required to retain it longer for legal or accounting purposes. Account and billing records are retained for the period required by tax and accounting law (typically seven years).

7. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete information, subject to legal retention requirements.
  • Object to or restrict certain processing.
  • Receive a copy of your information in a portable format.
  • Withdraw consent for processing based on consent.
  • Opt out of any sale or sharing of personal information (we do not sell or share, but the right is preserved).
  • Lodge a complaint with a data-protection authority.

To exercise these rights, email [email protected]. We will verify your identity and respond within the time required by your jurisdiction (typically 30 to 45 days).

8. International Transfers

We are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate. For transfers from the European Economic Area, the United Kingdom, and Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

9. Cookies and Similar Technologies

We use a small number of cookies to keep you signed in, remember your preferences, and measure aggregate usage. We do not use third-party advertising cookies. You can manage cookie preferences in your browser; blocking certain cookies may break parts of the Service.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect information from them. If you believe a child has provided us information, contact [email protected] and we will delete it.

11. Security

We protect information using industry-standard administrative, technical, and physical safeguards, including encryption in transit (TLS 1.2+) and at rest, role-based access controls, and continuous security monitoring. No system is perfectly secure; if you suspect unauthorized access to your account, contact [email protected] immediately.

12. Changes to This Policy

We may update this Policy. We will notify you of material changes by email or in-app notice at least 30 days before the changes take effect.

13. Contact

Privacy questions: [email protected]. Mailing: X3 E-Commerce LLC d/b/a FrontDesk Global, Michigan, United States.

X3 E-Commerce LLC d/b/a FrontDesk Global • Michigan, United States

TheAutoReply
Sister tools under FrontDesk Global
TheAutoReply TestimonialCollect PreventNoShows FreshLocalSEO ReplaceReceptionist CustomerRetentionAI
View the bundle →
Home · Dashboard · Demo · Pricing · FAQ · Terms · Privacy · AI Disclosure
Questions? [email protected]
A product of FrontDesk Global · X3 E-Commerce LLC · Howell, Michigan