TheAutoReply by FrontDesk Global
Home Demo Pricing FAQ Sign in
← Back to TheAutoReply

Privacy Policy

Updated September 27, 2026. Version 1.2.

This Privacy Policy explains how X3 E-Commerce LLC d/b/a FrontDesk Global (“FrontDesk Global”, “we”, “us”) collects, uses, and shares personal information in connection with TheAutoReply (the “Service”).

We have built TheAutoReply with three commitments: we do not sell personal information, we do not train AI models on customer data, and we treat all users — wherever they live — to the same baseline privacy rights.

1. Who is the Controller / Processor

When we provide the Service to you (our customer), you act as the “controller” of your customers' or tenants' personal information, and we act as a “processor” or “service provider” on your behalf, in the sense those terms are used in the GDPR, CCPA/CPRA, and similar laws.

When we collect personal information directly from you to manage our relationship with you (account, billing, support), we act as a controller. This Policy covers both relationships.

2. Information We Collect

2.1 Information you give us

  • Business profile details (name, address, hours, categories)
  • Review content and reviewer first names (Google's display fields)
  • Reply drafts and final approved replies
  • Brand voice samples and tone preferences

2.2 Account and billing information

  • Name, email address, phone number, business name and address.
  • Payment-method information processed by our payment provider, Stripe (we never see or store full card numbers).
  • Authentication credentials (passwords are stored hashed; we use OAuth where supported).

2.3 Information collected automatically

  • Device, browser, and connection metadata (IP address, user agent, language).
  • Usage logs (pages visited, actions taken, errors encountered).
  • Cookies and similar technologies — see Section 9.

3. How We Use Information

We use information to:

  • Provide and operate the Service, including the AI features described in our AI Disclosure.
  • Process payments and manage your subscription.
  • Communicate with you about your account, security, billing, and product updates.
  • Detect, prevent, and address fraud, abuse, and security incidents.
  • Comply with legal obligations and enforce our Terms.
  • Improve the Service through aggregated, anonymized analytics. We do not use the content of customer data to train AI models.

4. AI Processing

When TheAutoReply uses AI to draft text, we send only the input needed for that task (for example, the review text, your business details, and your brand-voice settings) to our AI provider, Anthropic. Anthropic processes it only to return output to us and does not use it to train its models. Details are in our AI Disclosure.

5. How We Share Information

We share information only as needed to operate the Service:

  • Sub-processors. We use these vendors to run the Service: Cloudflare, Inc. (hosting, database, security, and cookieless site analytics); Anthropic, PBC (AI drafting of replies); Resend, Inc. (transactional e-mail); Stripe, Inc. (billing; we never see full card numbers); Google LLC (Google Business Profile APIs, only when you connect a profile); and Meta Platforms, Inc. (Facebook Page reviews, only if you connect a Page).
  • Your authorized integrations. We exchange data only with the services you connect: your Google Business Profile, and a Facebook Page if you connect one.
  • Legal compliance. We may disclose information when required by law, valid legal process, or to protect rights, safety, and property.
  • Business transfers. If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you and any successor will be bound by this Policy.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

5A. Google Business Profile Data

When you connect a Google Business Profile to TheAutoReply, we access the following data via the Google Business Profile APIs, exclusively for the stated purposes:

  • Reviews (text, star rating, reviewer first name as displayed by Google, timestamp) — read to allow our AI to draft reply suggestions for your approval.
  • Reply status and content — written only when you, the owner, explicitly approve a draft. Auto-publishing is opt-in per star-rating threshold; you can disable it at any time.
  • Business Profile metadata (name, address, categories, hours) — read to give the AI context for drafting on-brand replies.
  • Account ownership/management status — verified once at connection time so we can confirm you have the right to operate on the profile.

What we do not do with your Google Business Profile data:

  • We do not store, sell, or transfer Google Business Profile data to any third party other than sub-processors strictly necessary to operate the Service (listed under section 5).
  • We do not use Google Business Profile data, including review content, to train or improve AI models — ours or our vendors'.
  • We do not use Google Business Profile data for advertising, lead generation, or marketing to any party other than you.
  • We do not access location insights, performance metrics, or any GBP data beyond what is required to draft and post review replies on your behalf.

Revocation: You can disconnect your Google Business Profile from TheAutoReply at any time, either from your TheAutoReply dashboard or from your Google account's connected-apps page. Upon revocation we stop accessing your Google data immediately and delete the stored Google access tokens. Reviews and replies already in your account stay available to you (for example, to export as CSV) until you ask us to delete them or your account is closed. E-mail hello@frontdeskglobal.com to have them deleted; we complete deletion within 30 days of your request, except where retention is required by law.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5C. Linked Customer Records, Text-Message Rules, and AI Features (Updated September 27, 2026)

One customer timeline inside your business account. If your business uses more than one FrontDesk Global product (for example TheAutoReply and PreventNoShows), we link records that refer to the same customer — matched by phone number or e-mail address — so you can see one timeline of that customer’s visits, messages, reviews, testimonials, and calls across your FrontDesk Global products. Linking happens only inside your own business account. We never link, merge, or share customer records between different businesses, and one business can never see another business’s customers.

Two kinds of text-message consent. Each business keeps separate consent records for each phone number:

  • Informational texts — messages about something the customer asked for or booked, such as appointment reminders and confirmations, feedback requests after a visit, and replies to the customer’s own questions.
  • Marketing texts — promotional messages such as win-back offers and discounts. These are sent only to people who agreed to receive marketing texts from that business.

Quiet hours. Automated texts are sent only between 8:00 a.m. and 9:00 p.m. in the business’s local time. A text that comes due outside that window waits until the window opens.

STOP works per business. Replying STOP to a text from a business stops all further texts from that business through any FrontDesk Global product. It does not stop texts from other, unrelated businesses that also use FrontDesk Global; reply STOP to their messages separately. Replying START to that business opts the number back in. Reply HELP for help, or e-mail hello@frontdeskglobal.com.

AI features and private review matching. Where a FrontDesk Global product suggests which of your customers may have written a public review (by comparing the reviewer’s public display name and timing with your own customer records), that suggestion is shown only to you inside your account. It is never included in a public review reply, never shown to the reviewer or anyone else, and never used to train AI models. For healthcare businesses (such as dental, medical, therapy, chiropractic, pharmacy, and med spa), review matching is off by default. AI is never used to put private customer details into public replies.

5D. Newer Features and the Data They Use (Updated September 27, 2026)

  • Reply status (Reply Watchdog). After a reply is posted, we read the review back from Google to show you whether Google shows it, is still reviewing it, or rejected it, and Google’s stated reason.
  • Attack Shield. We look at patterns in new reviews (rating, timing, wording, and whether reviewers are anonymous) to spot a possible review attack. When it triggers, we e-mail you and text the mobile number on your account. The evidence pack we prepare for you to send to Google never includes your customers’ names or records. You decide whether to submit it.
  • Private review match (“Who is this?”). If you also use other FrontDesk Global products, we compare the reviewer’s public display name and the review’s timing with customer records in your own account to suggest who may have written it. Only you see the suggestion; you can confirm or reject it. It is never put into a reply or sent to Google, is off by default for healthcare businesses, and can be switched off in Settings.
  • Voice samples from your past replies. When you first connect Google, we save up to 8 replies you already posted there as voice samples so drafts sound like you. You can view and remove them. We skip this in healthcare mode.
  • Yelp. We do not collect Yelp reviews automatically. Text you paste in is used only to draft a reply for you.
  • Real-time review notices (optional). If enabled, Google notifies us when a new review arrives so we can check sooner. No additional data is collected.

6. Retention

We retain Your Content for as long as your account is active. After termination, we retain it for at least 30 days to support export, then delete it within 90 days unless we are required to retain it longer for legal or accounting purposes. Account and billing records are retained for the period required by tax and accounting law (typically seven years).

7. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete information, subject to legal retention requirements.
  • Object to or restrict certain processing.
  • Receive a copy of your information in a portable format.
  • Withdraw consent for processing based on consent.
  • Opt out of any sale or sharing of personal information (we do not sell or share, but the right is preserved).
  • Lodge a complaint with a data-protection authority.

To exercise these rights, email hello@frontdeskglobal.com. We will verify your identity and respond within the time required by your jurisdiction (typically 30 to 45 days).

8. International Transfers

We are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate. For transfers from the European Economic Area, the United Kingdom, and Switzerland, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

9. Cookies and Similar Technologies

We use a small number of cookies to keep you signed in, remember your preferences, and measure aggregate usage. We do not use third-party advertising cookies. You can manage cookie preferences in your browser; blocking certain cookies may break parts of the Service.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect information from them. If you believe a child has provided us information, contact hello@frontdeskglobal.com and we will delete it.

11. Security

We protect information using industry-standard administrative, technical, and physical safeguards, including encryption in transit (TLS 1.2+) and at rest, role-based access controls, and continuous security monitoring. No system is perfectly secure; if you suspect unauthorized access to your account, contact hello@frontdeskglobal.com immediately.

12. Changes to This Policy

We may update this Policy. We will notify you of material changes by email or in-app notice at least 30 days before the changes take effect.

13. Contact

Privacy questions: hello@frontdeskglobal.com. Mailing: X3 E-Commerce LLC d/b/a FrontDesk Global, Michigan, United States.

X3 E-Commerce LLC d/b/a FrontDesk Global • Michigan, United States

TheAutoReply
Sister tools under FrontDesk Global
TheAutoReply TestimonialCollect PreventNoShows FreshLocalSEO ReplaceReceptionist CustomerRetentionAI
View the bundle →
Home · Demo · Pricing · FAQ · Terms · Privacy · AI Disclosure
Questions? hello@frontdeskglobal.com
A product of FrontDesk Global · X3 E-Commerce LLC · Howell, Michigan