Privacy Policy

Last updated: January 2025

1. Introduction

onereply ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and French data protection laws.

2. Data Controller

Lucas Neves Pereira
Auto-entrepreneur
France
Contact: Email

3. Data We Collect

We collect the following information:

Account data: Name, email address when you register
Gmail metadata: Sender, recipient, subject, date, and snippet of emails (we do NOT read full email content)
Payment data: Processed securely by Stripe (we don't store card details)

4. How We Use Your Data

To provide our service: detecting which emails need your reply
To process payments via Stripe
To send essential service communications
To improve our service using AI classification (OpenAI)

5. Third-Party Services

We use the following services that process your data:

Google OAuth: For Gmail authentication
Stripe: Payment processing
OpenAI: Email classification (only metadata, not content)
Vercel Inc.: Hosting (340 S Lemon Ave #4133, Walnut, CA 91789, USA)

6. Data Retention

We retain your data for as long as your account is active. Email metadata older than 30 days is not synced. When you delete your account, all your data is permanently removed.

7. Your Rights (GDPR)

You have the right to:

Access: Request a copy of your data
Rectification: Correct inaccurate data
Erasure: Delete your account and all data
Portability: Receive your data in a portable format
Object: Object to certain processing

To exercise these rights, contact us.

8. Security

We use industry-standard security measures including encryption in transit (HTTPS), secure authentication, and regular security updates.

9. Cookies

We only use essential cookies for authentication. We do not use tracking or advertising cookies.

10. Changes

We may update this policy. Significant changes will be notified via email.