Privacy Policy

This policy explains what information VibeReply AI ("VibeReply", "we") collects through the VibeReply browser extension for Chrome and Edge and the website at vibereplyai.vercel.app, why we collect it, and the choices you have.

What the extension reads

The extension can detect a text field on a website so its floating icon can appear next to it, the same way a spell-checker would. It does not read or send any page content until you ask it for something — a reply, a rewrite, or a translation. At that point it reads only the conversation or draft you are working on that is visible on the page, not your full message history and nothing else on the page.

What is sent to our servers

When you request a reply, rewrite, or translation, the message text for that one request is sent to our backend, which passes it to an AI model provider (OpenAI or Google Gemini) to produce the suggestion. Before sending, the extension automatically removes patterns that look like phone numbers, email addresses, one-time codes, and card numbers.

We do not store the content of your conversations, your drafts, the replies we generate, or your translations on our servers. They exist only for the time needed to produce a response. Our server logs record technical details such as timing, the number of messages, and error codes — not message text.

Information we store

• Device ID — a random ID created in your browser when you install the extension. It is used to keep your tone settings and to count how many free replies the device has used.
• Account details (only if you sign in with Google) — your name, email address, and Google account ID. See "Google Sign-In" below.
• Usage counts — the number of replies used per day or in total, so we can apply the free allowance and any trial. These are numbers only, not content.
• Tone profiles — names, settings, and custom instructions for the tones you create or edit.
• Subscription status — if you buy a paid plan, the customer and subscription IDs and status our payment provider sends us. We never see or store your card details.
• Security records — a one-way keyed hash of your IP address for rate limiting and preventing abuse of free trials. These records are deleted after 30 days.
• Sign-in history — when you sign in or out with Google, we record the time, your IP address, the approximate location it points to (city, region, country), your browser, operating system and device type, and the extension version. We use it to keep your account secure, spot suspicious sign-ins and help you with account problems. It is deleted after 180 days.
• Feedback you send us — the message, category and rating, and the name and email if you choose to give them, plus the page you sent it from, your browser type, a hashed IP, and your device or account ID. We use it only to improve VibeReply and to reply to you.

Google Sign-In

Signing in is optional. If you sign in with Google, we request only the basic openid, email, and profile permissions. From Google we receive your name, email address, and Google account ID. We use them only to create and secure your VibeReply account, link your extension installs to it, apply your plan, trial, and reply allowance, and contact you about your account. We do not access your Gmail, contacts, Drive, or any other Google data.

VibeReply's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, use it for advertising, or use it to train AI models.

Stored only in your browser

Your settings, sign-in session (valid for 30 days), unsent drafts, recently generated replies, and local conversation history are kept in your browser's extension storage. They are not sent to us, and they are removed when you clear them in the extension settings or uninstall the extension.

Service providers

• OpenAI / Google Gemini — generate the reply, rewrite, or translation for your request.
• Vercel — hosts the website and API.
• Neon — managed Postgres database for the information listed above.
• Lemon Squeezy — processes payments as merchant of record for paid plans.
• Google — sign-in, if you choose to use it.

We do not sell your personal information or share it with advertisers.

What VibeReply never does

• It never sends a message for you. Every suggestion is inserted as a draft that you review and send yourself.
• It never sends page content anywhere unless you ask for a reply, rewrite, or translation.
• It never sells your data.

How long we keep data

Account, device, tone, and subscription records are kept while you use VibeReply and deleted when you ask us to delete them. Hashed IP security records are deleted after 30 days, and sign-in history after 180 days. Feedback is kept for as long as it is useful for improving the product, and you can ask us to delete it at any time.

Your choices and rights

• Use VibeReply without signing in.
• Sign out at any time, which unlinks the extension on that browser from your account.
• Clear local history from the extension settings, or uninstall the extension to remove all local data.
• Ask for a copy of your data, or for your account and all associated data to be deleted, through our feedback page (include the email you signed in with). We respond within 30 days.

Children

VibeReply is not directed to children under 13 (or under 16 where local law requires), and we do not knowingly collect their personal information.

Changes to this policy

If we change how we handle your data, we will update this page and the "Last updated" date. Significant changes will also be announced on the website or in the extension.

Contact

Questions about this policy or your data: write to us on the feedback page. See also our Terms of Service.