Privacy Policy
Last updated October 23, 2026
What ReplyMan collects, why, who else handles it, and how to get it deleted.
ReplyMan (“we”) runs replyman.app, a service that finds public posts worth answering on X, Reddit, LinkedIn, Bluesky and Hacker News and drafts replies for you to approve. This policy covers the website and the app.
What we collect
- Account details. Your email address and name. If you sign in with Google, also your Google profile name and picture.
- What you put in your workspace. Workspace and agent names, the topics, keywords and accounts each agent watches, the examples and voice notes you give it, the drafts it writes, and the edits, approvals and rejections you make.
- Your writing style. If voice learning is on, short descriptions of how you write, learned from the edits you make to drafts. You can turn this off, remove any trait, or reset it in Settings.
- Connected platform details. The X, Reddit and LinkedIn usernames you enter, so we can recognise your replies after you post them. For Bluesky, your handle and the sign-in token Bluesky gives us when you sign in with Bluesky (or an app password, if you choose that instead), stored encrypted. We never ask for your X, Reddit or LinkedIn password.
- Public posts. The public posts your agents find, including their authors' public usernames, and when you last replied to an author, so an agent does not reply to the same person too often.
- Usage and technical data. Counts of drafts and AI usage per workspace, and the IP address and browser of each signed-in session. IP addresses are also used briefly to limit repeated sign-in attempts.
- Free account checkers. The Reddit username or X handle you enter in our free account checkers, and the answer, which we keep for ten minutes so a repeat check is instant. To limit how often one visitor can check, we keep a keyed, one-way hash of your IP address for up to an hour. We don't store the address itself, and a check isn't linked to an account or a sign-in.
- Time zone. Your browser's time zone (such as “Asia/Kolkata”), so posting reminders arrive at the hours you pick.
How we use it
- To run the service: search for posts, decide which are worth a reply, and draft replies.
- To post on Bluesky when you approve a reply, and to detect replies you post on X, Reddit and LinkedIn.
- To send sign-in links, messages about your account, and the reminder and report emails you choose.
- To keep the service secure, prevent abuse, and enforce plan limits.
We do not sell your data, show ads, or use advertising trackers. We do use product analytics to see which pages are visited, what gets clicked and which errors happen, so we can fix what breaks. Our product analytics sets no cookies and stores nothing in your browser. Google Analytics sets one cookie. In the European Economic Area, the UK and Switzerland it does so only if you accept.
Who else handles it
We use these providers to run ReplyMan. Each receives only what its job needs.
- Cloudflare hosts the app, stores its database and files, sends our emails, and runs some AI models.
- Anthropic and TypeSafe receive post text and your agent's instructions to classify posts and write drafts.
- twitterapis.com, redditapis.com, HarvestAPI (LinkedIn) and Algolia (for Hacker News) receive your agents' search terms and the usernames needed to find public posts and your replies. twitterapis.com also receives the X handles entered in the free X shadowban checker.
- TikHub receives the Reddit usernames entered in the free Reddit account checker.
- PostHog receives product analytics: pages visited, buttons clicked and errors, and once you sign in, your account ID and email address.
- Google, if you choose to sign in with Google. Google Analytics also receives anonymous visit data, such as the pages viewed. It sets a first-party cookie to recognise repeat visits. In the European Economic Area, the UK and Switzerland it sets it only if you accept in our cookie banner. Anywhere, you can turn it off with Cookie settings at the bottom of the page.
- Bluesky, which receives the replies you approve there.
We may also disclose information when the law requires it.
Cookies
We only use cookies needed to keep you signed in. See the Cookie Policy.
How long we keep it
We keep your data while your account is active. If you ask us to delete your account, we delete your workspace data, except anything we must keep to meet a legal obligation.
Your choices and rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email legal@replyman.app from the address on your account and we will reply. Depending on where you live, you may also be able to complain to your data protection authority.
Children
ReplyMan is not meant for anyone under 16, and we do not knowingly collect their data.
Changes
If we change this policy, we update the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.
Contact
Questions about privacy: legal@replyman.app. For anything else: hello@replyman.app.