Privacy Policy

NxtReply ("we," "us," or "our") operates the NxtReply Chrome extension and the web dashboard at nxtreply.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights. If you have questions, email us at support@nxtreply.com.

2.1 Account information

• Email address — used for authentication, service communications, and billing notices.
• Password — stored as a salted hash by Supabase Auth; we never see or store your plaintext password.
• Display name and phone number — only if you choose to add them in your profile settings.

2.2 Usage data

• Activity metadata — when you generate a reply, fix grammar, or use another AI feature, we record the date and time, which prompt template was used, the website hostname (e.g. x.com), and the AI action type. This powers your usage dashboard and our analytics.
• Credit balance and plan — your current plan, credit balance, and billing anniversary date.
• Prompt library — the custom prompt templates you create or edit, stored against your account so they appear in the extension.

2.3 Payment information

Payments are processed entirely by PayPal. We do not collect, transmit, or store your credit card number, bank account details, or other payment credentials. We receive from PayPal only: your PayPal subscription ID, transaction status, and the amount charged — solely for order fulfillment and support.

2.4 Technical data

• Session data — a session cookie set by Supabase Auth (sb-*) to keep you signed in.
• Server logs — standard web server logs (IP address, browser type, request URL, timestamp) retained for up to 90 days for security and debugging.

• The text content of messages you read or write on any website, except the portion you explicitly submit to the AI when generating a reply.
• The content of textboxes that you have not actively triggered NxtReply on. The extension only activates when you click the NxtReply badge on a specific textbox.
• Your browser history or the URLs of pages you visit.
• Sensitive personal data such as government-issued IDs, health or medical information, financial account numbers, or biometric data.
• Data from other browser tabs or extensions.

• To provide the service — authenticating you, routing your AI requests, tracking credit usage, and displaying your prompt library in the extension.
• To process payments — communicating with PayPal to create and manage your subscription or one-time order.
• To send service communications — account confirmations, billing receipts, subscription renewal notices, and important product updates. These are not optional for paid users.
• To improve the service — aggregated, anonymized usage analytics (e.g., which feature types are most used) to inform product decisions. We do not use individual message content for this purpose.
• To ensure safety and compliance — detecting abuse, fraud, or violations of our Terms of Service.

We do not sell your personal data. We share information only in the following limited circumstances:

• AI inference providers — when you generate a reply or use another AI feature, the relevant text input and your chosen prompt are sent to our AI provider(s) for inference. These providers do not retain inputs for model training under our usage agreements.
• PayPal — your email address and subscription details are shared with PayPal to process payments and manage subscriptions.
• Supabase — our database and authentication infrastructure provider. Your account data is stored on Supabase servers.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights, property, or safety of NxtReply or others.
• Business transfers — if NxtReply is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

NxtReply's infrastructure is hosted primarily in the United States. Our AI inference providers may also process data in the United States and Asia-Pacific regions. By using NxtReply, you consent to the transfer of your data to these locations, which may have different data protection laws than your country.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses with our sub-processors for cross-border data transfers where required.

• Account data — retained for as long as your account is active and for up to 30 days after deletion, after which it is permanently purged.
• Usage logs — retained for up to 12 months for analytics and dispute resolution, then deleted.
• Payment records — retained for up to 7 years as required by applicable financial regulations.
• Server logs — retained for up to 90 days for security purposes.

NxtReply uses the following cookies:

• Authentication cookies (sb-*) — strictly necessary session cookies set by Supabase Auth to keep you signed in. These cannot be disabled without also signing you out.

We do not use third-party advertising cookies, tracking pixels, or behavioral profiling cookies. We do not participate in ad retargeting networks. If we add analytics cookies in the future, we will update this policy and obtain your consent where required.

We implement industry-standard technical and organizational safeguards to protect your personal data, including TLS encryption in transit, encrypted storage, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable law.

NxtReply is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@nxtreply.com and we will delete it promptly.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your account and personal data (subject to legal retention requirements).
• Portability — request an export of your data in a machine-readable format. You can export your prompts from the dashboard at any time.
• Objection / restriction — object to or request restriction of certain processing activities.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, to delete it, to opt out of its sale (we do not sell personal information), and to non-discrimination for exercising your rights. To exercise your rights, contact us at support@nxtreply.com.

EEA / UK residents (GDPR)

Our lawful bases for processing are: (a) contract performance (providing the service you signed up for); (b) legitimate interests (security, fraud prevention, product improvement); and (c) consent where specifically indicated. You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@nxtreply.com. We will respond within 30 days.

NxtReply integrates with the following third-party services, each governed by their own privacy policies:

• Supabase — database and authentication (supabase.com/privacy)
• PayPal — payment processing (paypal.com/privacy)
• AI inference providers — process text inputs for AI features; do not retain inputs for training under our agreements.

NxtReply is not responsible for the privacy practices of these third parties.

We may update this Privacy Policy from time to time. We will notify you of material changes by email to your registered address or via an in-app notice at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy-related questions, requests, or complaints, please contact us at:

NxtReply
Email: support@nxtreply.com