Privacy Policy

Who we are

ReplyThemAll is a service that answers inbound leads for home-service businesses. It connects to the marketplaces where those leads arrive, writes a reply, sends follow-ups, and can call the business owner when a request looks urgent.

The service is operated by DigiPro360 LLC, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States. For information about our own customers we are the data controller; for information about their customers we are the processor, on the terms set out in the Terms of Service.

Questions about this policy go to privacy@replythemall.com.

If you are a ReplyThemAll customer

When you create an account and connect a marketplace, we collect and store:

• Your email address, and your name and phone number if you provide them.
• Your business details: name, service area, hours, services, price ranges, and the instructions you write for how replies should sound.
• Access tokens for the marketplaces you connect. These are encrypted before they are written to our database, and we never ask for or store your marketplace password.
• Sign-in records: session tokens, IP address, and browser user agent, used to keep you signed in and to detect abuse.
• Billing identifiers from Stripe. Card numbers go directly to Stripe and never reach our servers.

Google Ads and Local Services data

If you connect Google Local Services, you sign in with Google and grant ReplyThemAll access to the Google Ads API (the https://www.googleapis.com/auth/adwords permission). With that access we:

• List the Google Ads accounts you can access and read their campaign settings, only to find which accounts run Local Services ads.
• Read the Local Services leads of the accounts you connect, and their conversations: the customer’s name, phone number, the request, and the messages exchanged.
• Post replies to those conversations on your behalf, according to your settings.

How we use and protect Google user data

ReplyThemAll’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide the features you see in ReplyThemAll: receiving your Local Services leads, writing and sending replies, notifying you, and showing the conversations in your dashboard. We do not use it for advertising, we do not sell it, and we do not use it to train general-purpose AI models.

Lead content is sent to Anthropic only to generate the reply to that lead, under an agreement that it is not used to train their models. Other than that, Google user data is shared only with the infrastructure providers listed below, solely to run the service.

People at ReplyThemAll do not read your Google data unless you ask us to (for example, in a support request), it is needed for security or to investigate abuse, or the law requires it.

Google access tokens are encrypted before they are stored. You can disconnect Google at any time in Sources, which deletes the tokens, or revoke access at myaccount.google.com/permissions.

If you contacted a business and got a reply from us

When you submit a request on Thumbtack, Google Local Services, or a similar marketplace, that marketplace passes your request to the business you chose. If that business uses ReplyThemAll, we receive and store:

• Your name, phone number, and email address as the marketplace provided them.
• The text of your request and the service category it falls under.
• The messages exchanged in that conversation, whether sent through the marketplace or by text message.
• Records of calls connecting you with the business: the numbers involved, the time, and how long the call lasted. We do not record call audio.
• A short automated assessment of the request — how urgent it appears, whether it matches what the business does — used to decide whether and how to reply.

Text messages and consent data

ReplyThemAll sends text messages on behalf of the businesses that use it, to people who contacted that business themselves and left a phone number: through a form on the business’s own website, through Google Local Services, or through a marketplace such as Thumbtack or Yelp.

We do not sell, rent, or share mobile opt-in data or consent records with third parties, and we do not share them with anyone for marketing or promotional purposes. Opt-in information is used only to deliver the messages of the business you contacted.

Replying STOP to any message ends messages permanently. We record the phone number that opted out and check every outgoing message against that record — including messages for a different business later on. Because that record exists to protect you, we keep it even after everything else about the conversation is deleted.

Replying HELP returns the name of the business you contacted and our support address, support@replythemall.com.

If you use ReplyThemAll for your business, we text the phone number on your account only if you turn on text alerts in your settings yourself. Those messages come from ReplyThemAll and concern your own account. Your opt-in is covered by the same commitment: it is never sold or shared, and replying STOP ends the alerts.

How the information is used

We do not use conversation content to advertise to anyone, and we do not build profiles of the people who submit requests.

• To write, send, and follow up on replies to inbound requests.
• To decide whether a request warrants a reply at all — spam and requests scored below the business’s minimum are filtered out.
• To notify the business owner, by text or by phone, when a request looks urgent or when something has gone wrong.
• To bill customers for the leads their account replied to.
• To keep the service running: diagnosing failures, preventing abuse, and meeting legal obligations.

Automated processing

Replies are generated by an AI model rather than written by a person. The content of the conversation is sent to Anthropic, our model provider, to produce the reply and to assess the request.

Under our agreement with Anthropic, this content is not used to train their models.

Business owners can require every reply to be approved by a human before it is sent, and we recommend that setting for the first weeks of use.

Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioural advertising. Information is shared only with the providers that make the service work, each of which is bound to use it solely for that purpose:

Other disclosures

• To the marketplace the lead came from, when a reply is delivered through its own messaging system.
• To the business you contacted, which sees the full conversation in its dashboard.
• When required by law, or to investigate fraud, abuse, or a threat to someone’s safety.
• To a successor, if the service is acquired. This policy would continue to apply until you were told otherwise.

How long we keep it

Security

Our staff can open your account and the conversations in it. We do this to support you and to investigate problems — a bot that stopped replying cannot be diagnosed without reading what it wrote. Every such view is recorded: who looked, at what, and when. We do not read conversations for any other purpose, and we never use them to contact your customers ourselves.

No system is perfectly secure. If a breach affects your information, we will tell you and the relevant authorities as the law requires.

• Marketplace access tokens are encrypted with AES-256-GCM before storage. Tampered ciphertext is rejected rather than decrypted.
• All traffic runs over HTTPS, and the site is served with a strict content security policy.
• Incoming webhooks from marketplaces and from SignalWire are signature-verified before anything is written.
• Our database keeps a short rolling history so we can recover from a mistake or an outage, and we also keep encrypted nightly backups. Deleted data can persist in that history for up to a day, and in the encrypted backups for up to 14 days, before it ages out. Backups are used only to restore the service after a failure.
• You can sign in with a password, with Google, or with a one-time link by email. Passwords are stored hashed, never in readable form, and sign-in attempts are rate limited.

Your rights

Depending on where you live — California residents in particular — you may ask us to tell you what we hold about you, to correct it, to delete it, or to give you a copy. We do not sell personal information, so there is nothing to opt out of on that front. Exercising these rights will never lead to worse service.

Write to privacy@replythemall.com and we will respond within 45 days.

If you submitted a request to a business rather than signing up yourself, the business decides what happens to that conversation. We will pass your request to them and act on their instruction. You can always stop messages yourself by replying STOP.

Children

ReplyThemAll is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 18.

Changes

If this policy changes in a way that matters, we will tell account holders by email before it takes effect. The date at the top always reflects the current version.