Who we are
ReplyThemAll is a service that answers inbound leads for home-service businesses. It connects to the marketplaces where those leads arrive, writes a reply, sends follow-ups, and can call the business owner when a request looks urgent.
Questions about this policy go to privacy@replythemall.com.
If you are a ReplyThemAll customer
When you create an account and connect a marketplace, we collect and store:
- Your email address, and your name and phone number if you provide them.
- Your business details: name, service area, hours, services, price ranges, and the instructions you write for how replies should sound.
- Access tokens for the marketplaces you connect. These are encrypted before they are written to our database, and we never ask for or store your marketplace password.
- Sign-in records: session tokens, IP address, and browser user agent, used to keep you signed in and to detect abuse.
- Billing identifiers from Stripe. Card numbers go directly to Stripe and never reach our servers.
If you contacted a business and got a reply from us
When you submit a request on Thumbtack or a similar marketplace, that marketplace passes your request to the business you chose. If that business uses ReplyThemAll, we receive and store:
- Your name, phone number, and email address as the marketplace provided them.
- The text of your request and the service category it falls under.
- The messages exchanged in that conversation, whether sent through the marketplace or by text message.
- Records of calls connecting you with the business: the numbers involved, the time, and how long the call lasted. We do not record call audio.
- A short automated assessment of the request — how urgent it appears, whether it matches what the business does — used to decide whether and how to reply.
Text messages and consent data
ReplyThemAll sends text messages on behalf of the businesses that use it, to people who submitted a request to that business through a marketplace.
We do not sell, rent, or share mobile opt-in data or consent records with third parties, and we do not share them with anyone for marketing or promotional purposes. Opt-in information is used only to deliver the messages of the business you contacted.
Replying STOP to any message ends messages permanently. We record the phone number that opted out and check every outgoing message against that record — including messages for a different business later on. Because that record exists to protect you, we keep it even after everything else about the conversation is deleted.
Replying HELP returns contact details for the business and for ReplyThemAll.
How the information is used
We do not use conversation content to advertise to anyone, and we do not build profiles of the people who submit requests.
- To write, send, and follow up on replies to inbound requests.
- To decide whether a request warrants a reply at all — spam and requests outside the business’s service area are filtered out.
- To notify the business owner, by text or by phone, when a request looks urgent or when something has gone wrong.
- To bill customers for the leads their account replied to.
- To keep the service running: diagnosing failures, preventing abuse, and meeting legal obligations.
Automated processing
Replies are generated by an AI model rather than written by a person. The content of the conversation is sent to Anthropic, our model provider, to produce the reply and to assess the request.
Under our agreement with Anthropic, this content is not used to train their models.
Business owners can require every reply to be approved by a human before it is sent, and we recommend that setting for the first weeks of use.
Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Information is shared only with the providers that make the service work, each of which is bound to use it solely for that purpose:
| Provider | What it handles | Where |
|---|---|---|
| Anthropic | Generates and qualifies reply text from conversation content | United States |
| Twilio | Sends and receives text messages, places calls | United States |
| Neon | Database — stores everything described above | United States |
| Vercel | Hosting and delivery of the application | United States |
| Inngest | Schedules follow-ups and retries background work | United States |
| Resend | Sends sign-in links and account email | United States |
| Stripe | Processes payment and stores card details | United States |
Other disclosures
- To the marketplace the lead came from, when a reply is delivered through its own messaging system.
- To the business you contacted, which sees the full conversation in its dashboard.
- When required by law, or to investigate fraud, abuse, or a threat to someone’s safety.
- To a successor, if the service is acquired. This policy would continue to apply until you were told otherwise.
How long we keep it
| What | How long |
|---|---|
| Customer account and business settings | While the account is open, then 90 days |
| Leads, conversations, and call records | While the account is open, then 12 months |
| Billing records | Seven years, as tax rules require |
| SMS opt-out records | Indefinitely — deleting them would let messages resume |
| Sign-in sessions | Until expiry or sign-out |
Security
No system is perfectly secure. If a breach affects your information, we will tell you and the relevant authorities as the law requires.
- Marketplace access tokens are encrypted with AES-256-GCM before storage. Tampered ciphertext is rejected rather than decrypted.
- All traffic runs over HTTPS, and the site is served with a strict content security policy.
- Incoming webhooks from marketplaces and from Twilio are signature-verified before anything is written.
- Sign-in is by one-time link. There are no passwords to steal, and sign-in requests are rate limited.
Your rights
Depending on where you live — California residents in particular — you may ask us to tell you what we hold about you, to correct it, to delete it, or to give you a copy. We do not sell personal information, so there is nothing to opt out of on that front. Exercising these rights will never lead to worse service.
Write to privacy@replythemall.com and we will respond within 45 days.
If you submitted a request to a business rather than signing up yourself, the business decides what happens to that conversation. We will pass your request to them and act on their instruction. You can always stop messages yourself by replying STOP.
Children
ReplyThemAll is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 18.
Changes
If this policy changes in a way that matters, we will tell account holders by email before it takes effect. The date at the top always reflects the current version.
Связаться
Вопросы о приватности: privacy@replythemall.com. Всё остальное: support@replythemall.com.