Privacy Policy

1. What We Collect

We collect information you provide directly, information generated as you use the service, and limited technical data.

Account information

• Email address and password (hashed — we never store plaintext passwords)
• Name and company name
• Billing information (handled by Stripe — we never see your card number)

Conversation data

• Full transcripts of your weekly voice training conversations
• Your responses, opinions, and perspectives shared during sessions
• Session metadata (timestamps, duration, message counts)

Voice profile data

• Your synthesized voice profile across tone, vocabulary, structure, perspective, and expertise
• Voice readiness scores and dimension analyses
• Content preferences and editorial feedback patterns

Content

• All content generated by Replacer on your behalf
• Your approvals, edits, and rejections in the content queue
• Any source materials you upload or share

Google Drive data (if connected)

• File metadata and content from documents you explicitly share with Replacer
• OAuth access tokens scoped to your authorized permissions
• We access only what you grant us — we do not scan your entire Drive

Technical data

• Page views and navigation events (anonymous, used for product improvement)
• Browser type, operating system, and IP address (for security and debugging)
• Error logs and performance data

2. How We Use Your Data

We use your data only to provide and improve the service. Specifically:

• Voice training: Your conversation transcripts are processed by our AI pipeline to build and refine your voice profile.
• Content generation: Your voice profile, source materials, and conversation history are used to generate content in your voice.
• Platform operations: Account data is used to manage your subscription, authenticate your sessions, and deliver the service.
• Product improvement: Aggregated, anonymized usage patterns help us make Replacer better. We do not use your personal data or content for this purpose.
• Communications: We send transactional emails (receipts, session reminders, weekly summaries). You can adjust email preferences in Settings.

We do not use your content to train AI models for other users. Your voice profile is yours alone.

3. Third-Party Services We Use

We work with a small set of trusted third parties to deliver the service:

We do not sell your data to advertisers, data brokers, or any other third parties.

4. Cookies & Authentication

Replacer uses a single authentication cookie:

• access_token — An httpOnly JWT cookie set when you log in. It cannot be accessed by JavaScript and is used only to authenticate your requests to Replacer. It expires when your session ends or after a set period of inactivity.

We do not use advertising cookies, third-party tracking cookies, or analytics cookies that send data to external services.

5. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• After cancellation: We retain your data for 30 days after account cancellation so you can reactivate if you change your mind. After 30 days, your data is permanently deleted.
• Billing records: We may retain billing records for longer periods as required by law.
• Aggregated data: Anonymized, aggregated usage statistics may be retained indefinitely.

6. Your Rights

You have the following rights with respect to your data:

• Access: You can view your conversation history, voice profile, and content queue directly in the platform. Request a full data export at any time by emailing hello@replacer.me.
• Correction: If any account information is incorrect, you can update it in Settings or contact us.
• Deletion: You can delete your account from the Settings page. This triggers permanent deletion of your data within 30 days. You can also request deletion of specific data (e.g., a specific conversation) by contacting us.
• Google integration revocation: You can disconnect your Google Drive integration at any time from Settings. This immediately revokes our access to your Drive.
• Portability: Request a machine-readable export of your data at any time.

To exercise any of these rights, email us at hello@replacer.me. We'll respond within 30 days.

7. Security

We take reasonable technical and organizational measures to protect your data:

• All data in transit is encrypted via TLS (HTTPS).
• All data at rest is encrypted in our database.
• Passwords are hashed using a strong one-way hashing algorithm — we cannot retrieve your plaintext password.
• Authentication uses httpOnly cookies to prevent JavaScript-based token theft.
• Access to production systems is limited to authorized personnel only.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@replacer.me.

8. Children's Privacy

Replacer is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we'll update the "last updated" date at the top of this page. If changes are material, we'll notify you by email. Your continued use of the service after changes take effect constitutes your acceptance of the updated policy.

10. Contact

Questions about this privacy policy or how we handle your data? Email us at hello@replacer.me. We'll respond within a few business days.