Legal

Privacy Policy

Last updated June 3, 2026

IndieReply is a Chrome extension and web app that drafts reply suggestions for X, LinkedIn, and Reddit. This policy explains what we collect, why we collect it, and what you can do about it. IndieReply is operated by Theo (the operator, we, us).

Information we collect

Account information. When you sign in with X, Google, or Apple, our authentication provider (Supabase) passes us your basic profile: your name, email address, and avatar as held by that provider. We never see the password for those accounts.

Billing information. Payments run through Stripe. Stripe handles your card details directly, so we never receive or store your full card number. We keep your subscription status, trial dates, and renewal dates so we know whether your account is active.

Content you submit. To generate replies, the extension sends your voice profile and the specific post you are replying to our backend, which forwards them to OpenAI. This content is used only to produce your suggestions for that one request. We do not keep a history of the posts you reply to or the drafts we generate.

Usage analytics. If you accept analytics cookies, we use PostHog (hosted in the European Union) to understand how the site and product are used, such as which pages are viewed. Until you accept, analytics stay in memory only, set no cookies, and are discarded when you reload. You can decline at any time.

Diagnostic and error data. To detect and fix breakage, we record technical details when something fails: the error message, the code location (a stack trace pointing at our own code), the page or site where it happened, and your account identifier when you are signed in. We use PostHog (EU region) for this too. In the web app, error reports from your browser follow the same analytics consent choice above. Errors detected on our servers, and errors in the Chrome extension while you are signed in, are recorded as part of operating the service so we can keep it working. These reports hold technical information, not the posts you reply to or the drafts we generate.

How we use your information

Provide and operate the service.
Process your trial and subscription.
Respond to your support requests.
Improve the product and fix problems.

We do not sell your personal data.

Service providers

We rely on a small set of processors, each handling only what its job needs:

Supabase: authentication and database.
Stripe: payments and subscriptions.
OpenAI: reply generation.
PostHog (EU region): product analytics (after you consent) and error tracking.
Vercel: hosting.
Resend: transactional email such as receipts and account notices.

Cookies and consent

We use two kinds of cookies. Strictly necessary cookies keep you signed in and remember your cookie choice; these stay on because the service cannot work without them. Analytics cookies are optional and load only after you choose Accept on the consent banner. You can change your mind by clearing the choice stored in your browser.

Data retention

Account and subscription data: kept while your account is active, and for as long as we need to meet legal and accounting duties after you cancel.
Generation content: not retained beyond the request.
Analytics and error data: retained according to our PostHog configuration.

Your rights

Depending on where you live, for example under the GDPR or CCPA, you can ask to access, correct, export, or delete your personal data, and object to certain processing. To make a request, email august.theo.pro@gmail.com. We respond within the time the law allows.

International transfers

Analytics data is processed in the European Union. Some other providers, such as Stripe and OpenAI, may process data in the United States under appropriate safeguards.

Security

We use reputable providers and standard measures to protect your data. No method of transmission or storage is perfectly secure, so we cannot promise absolute security.

Children

IndieReply is not intended for anyone under 16, and we do not knowingly collect data from children.

Changes to this policy

We may update this policy. When we make material changes, we update the date above and, where appropriate, let you know.

Contact

Questions about this policy or your data? Email august.theo.pro@gmail.com or reach us on X at @TheoAugust8.