Privacy Policy

ReplyFans (“we”, “our”, “us”) provides an AI-powered service that helps YouTube creators manage and reply to comments on their channels. Contact: replyfansteam@gmail.com.

Account data. When you sign up we collect your name, email address, and login identifiers (including via Google sign-in).

YouTube data. When you connect a channel we receive, via the YouTube Data API v3, your channel identity, your videos’ public comments, and OAuth tokens that let us read comments and post replies on your behalf. We request only the scopes needed: comment reading and reply posting.

Service data. Your reply preferences, tone settings, blocklists, approval decisions, usage counters, billing records, and support messages.

Technical data. Log data such as IP address, browser type, and pages visited, used for security and reliability.

ReplyFans’ use and transfer of information received from Google APIs — including YouTube Data API v3 data — adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the YouTube Terms of Service and YouTube API Services Terms of Service.

YouTube data (comments, channel metadata) is used solely to provide the ReplyFans service you requested: monitoring your channels’ comments, generating draft replies in your configured tone, and — only with your approval settings — posting replies. We do not sell YouTube user data, and we do not use it for advertising.

To operate your account, connect your channels, generate AI replies (processed via our AI sub-processor), enforce spam and safety filters, meter plan usage, process payments, send service and report emails, and improve reliability and safety.

We share data only with service providers needed to run ReplyFans (cloud hosting, database, AI reply generation, payment processing, email delivery), each bound by confidentiality obligations. We do not sell personal data. We may disclose data if required by law.

OAuth refresh tokens are encrypted with AES-256-GCM before storage; access tokens are held in memory only and never persisted. Traffic is encrypted with TLS. No method is perfectly secure, but we apply industry-standard safeguards.

We keep data while your account is active. You may delete your account at any time; we then delete or anonymize your personal data within 30 days, except where the law requires longer retention (e.g., billing records).

You can revoke ReplyFans’ YouTube access at any time from your Google Account → Security → Third-party access; this immediately stops all comment reading and reply posting.

Depending on your jurisdiction you may request access, correction, export, or deletion of your personal data. Write to replyfansteam@gmail.com and we will respond within 30 days.

ReplyFans is not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

We may update this policy; material changes will be announced by email or in-app notice at least 14 days before taking effect.