Privacy Policy

Last updated: May 1, 2026

Effective Date: April 1, 2026
Last Updated: May 1, 2026

1. Introduction

Vivifiedtech Co. LTD. operates ReplyAll.chat. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using ReplyAll.chat, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

  • Name, email address, and profile picture provided through OAuth sign-in via Google.

Messaging Data

  • Messages, conversations, and contact information from messaging platforms you connect to the Service, such as LINE. This includes messages received via official platform APIs (e.g., LINE Messaging API webhooks) and, for operators using our Chrome browser extension, messages observed in chat.line.biz while the extension is active. See Section 13 for details on the browser extension.

Usage Data

  • Pages visited, features used, browser type, device information, IP address, and timestamps. We use Umami, a privacy-focused analytics tool, to collect anonymized usage statistics.

Payment Information

  • Billing details and transaction history processed through Polar. We do not store your full payment card details directly.

AI Interaction Data

  • Message content sent to our AI features for generating reply suggestions, processed through Google Gemini.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service.
  • Process transactions and manage your subscription.
  • Generate AI-powered reply suggestions for your conversations.
  • Send important notices such as service updates, security alerts, and billing information.
  • Analyze usage trends to improve the Service.
  • Comply with legal obligations.

We process your personal data based on:

  • Contract performance - to provide the Service you signed up for.
  • Legitimate interest - to improve the Service, ensure security, and prevent fraud.
  • Consent - where you have given explicit consent, such as connecting a messaging platform.
  • Legal obligation - to comply with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal data. We share information only with the following third parties as necessary to operate the Service:

  • Polar - payment processing and subscription management.
  • Google Gemini - AI-powered reply suggestions. Message content is sent to Google’s API for processing.
  • Google Analytics - website analytics and advertising measurement, when applicable.
  • Railway - cloud infrastructure hosting.
  • Google OAuth - authentication and sign-in.

We may also disclose your information if required by law, to protect our rights, or in connection with a merger or acquisition.

6. Data Security

We take reasonable measures to protect your personal information, including:

  • Encryption of data in transit using TLS.
  • Encryption of data at rest.
  • Access controls limiting who can view your data.
  • Regular security reviews of our infrastructure.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

  • Account data is retained for as long as your account is active.
  • Messaging data is retained while your account is active and for up to 30 days after account deletion.
  • Usage analytics are collected in anonymized form and do not contain personally identifiable information.
  • Payment records are retained as required by applicable tax and financial regulations.

You may request deletion of your data at any time by contacting us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your personal data.
  • Export your data in a portable format.
  • Withdraw consent where processing is based on consent.
  • Object to processing based on legitimate interest.

To exercise any of these rights, contact us at seagin@replyall.chat. We will respond within 30 days.

9. Cookies and Tracking

We use essential cookies to keep you signed in and maintain your session. We use Umami for privacy-focused analytics, which does not use cookies or track users across websites. If we enable Google Analytics in the future, additional cookies may be used for analytics and advertising purposes.

See our Cookie Policy for details.

10. Children’s Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

11. International Data Transfers

Our Service is hosted on Railway. Your data may be processed in locations outside your country of residence. By using the Service, you consent to the transfer of your data to these locations. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this page and notify you via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Browser Extension

We publish the ReplyAll.Chat Chrome browser extension to help operators of LINE Official Accounts work faster inside chat.line.biz. This section explains exactly what the extension does and what data it handles.

What the extension does

  • Adds a side panel to your browser that displays AI-generated reply suggestions for the chat you currently have open in chat.line.biz.
  • Observes new incoming messages on chat.line.biz so suggestions can be generated in near-real time.
  • Inserts a chosen suggestion into the chat input when you click it. The extension never sends a message on your behalf — sending always requires your explicit click in chat.line.biz.

What data the extension accesses

  • Messages and chat metadata on chat.line.biz — incoming and outgoing messages, message identifiers, chat identifiers, and timestamps for the chats you have open while the extension is active. This data is forwarded over HTTPS to the same ReplyAll.Chat backend that powers the web dashboard, where it is treated as Messaging Data under Section 2.
  • Your authenticated session — after you sign in with Google via the extension, the ReplyAll.Chat backend issues a session token (JWT) that the extension stores locally using chrome.storage.local. The token is sent with subsequent requests to authenticate you. It is removed when you sign out.
  • The active tab’s URL on chat.line.biz — the extension reads the URL of your current chat.line.biz tab so the side panel can show suggestions for the chat you’re viewing. The extension does not read URLs or content from any other website.

What data the extension does NOT access

  • Your browsing history, bookmarks, downloads, or activity on any website other than chat.line.biz.
  • The contents of other tabs, including other Google services, email, or social networks.
  • Files on your computer.
  • Your microphone, camera, or location.

Permissions and why we request them

  • storage — to persist the session token locally so you don’t have to sign in every time.
  • identity — to perform the Google OAuth sign-in flow that issues the session token.
  • sidePanel — to render the suggestions UI in the browser’s side panel.
  • Host access to chat.line.biz and chat-streaming-api.line.biz — required to observe new messages and write a chosen suggestion into the chat editor.
  • Host access to replyall.chat — required to communicate with our backend.

Remote code
The extension does not download, parse, or execute remote JavaScript. All scripts are bundled in the published package. The side panel renders HTML fragments returned by the ReplyAll.Chat backend (your authenticated session) but no remote code is loaded.

Local storage and uninstall
The only data the extension stores locally is the session token, in chrome.storage.local. Uninstalling the extension removes this token along with all extension data.

14. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Vivifiedtech Co. LTD.
Email: seagin@replyall.chat

Preview