Privacy Policy

We collect account details, business configuration, customer enquiries and messages processed through PrimaReply, booking settings and records, support requests, billing and subscription identifiers, communication delivery records, and service diagnostics such as error and security events.

We use information to provide and secure PrimaReply, authenticate users, route and respond to enquiries, qualify leads, arrange bookings, deliver notifications, administer subscriptions, support accounts, investigate problems, and improve service reliability. We do not sell personal information.

When you use address or service-area suggestions during setup, PrimaReply sends the text you type to Google Maps Platform to return matching Australian locations. We store the location you select as part of your business configuration; we do not store the unused suggestions. You can enter a location manually instead.

Google processes this search information under the Google Privacy Policy.

When a business owner chooses to connect Google Calendar, PrimaReply accesses the connected Google account's identity, the names and identifiers of calendars on which that account has suitable write access, free-and-busy availability for the calendar selected by the business, and events that PrimaReply creates for confirmed bookings.

PrimaReply uses this information only to let the business select its booking calendar, avoid offering unavailable appointment times, create confirmed appointment events, prevent duplicate bookings, display the booking result, and maintain the connected integration. PrimaReply does not provide functionality to browse, edit, or delete arbitrary Google Calendar events.

We store the selected calendar identifier, name, and time zone; the connected Google account label; encrypted OAuth credentials needed to keep the connection working; and identifiers and links for booking events created through PrimaReply. Free-and-busy results are used to calculate available times and are not retained as a separate copy of a user's Google Calendar.

Google processes Calendar API requests and maintains the source Google Calendar. Vercel hosts the PrimaReply application code that makes those requests. Supabase stores the encrypted integration credentials and related calendar and booking records. These providers process information only as needed to provide their contracted services and operate the user-facing Google Calendar booking feature.

PrimaReply does not sell Google user data, disclose it to data brokers or advertising platforms, or use it for personalised advertising, credit decisions, or unrelated profiling.

Google OAuth access and refresh tokens are encrypted using AES-256-GCM before database storage. Google data is transmitted over HTTPS, provider credentials remain server-side, and access to integration and booking records is restricted through authenticated business permissions, database row-level security, and server-side service controls. We limit access to the information required to operate, secure, and support the connected feature.

PrimaReply does not send Google Calendar API data to OpenAI. We do not use raw or derived Google Workspace API data to create, train, or improve foundational or general-purpose artificial-intelligence or machine-learning models. AI used to interpret a customer's requested booking time operates on the customer's enquiry and the business's PrimaReply configuration, not on Google Calendar API user data.

PrimaReply’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

A business owner can disconnect Google Calendar from Booking & integrations settings. Disconnecting disables Calendar automation, clears the selected calendar, and replaces the stored OAuth credentials so PrimaReply can no longer use them. The user can separately revoke PrimaReply's access from their Google Account permissions.

You can request access to, correction of, or deletion of your PrimaReply account and associated integration data through the Data & deletion page. We may need to verify your identity before acting on a request.

PrimaReply also uses specialist providers to operate other parts of the service, including Twilio for telephone and SMS services, OpenAI for configured processing of customer enquiries and business information, Resend for email delivery, and Stripe for billing. Each provider processes information only as needed to provide its contracted service. As explained above, Google Calendar API data is not sent to OpenAI.

Businesses using PrimaReply are responsible for the personal information they collect from their customers, their instructions to PrimaReply, and obtaining any notices or consents required for their communications and bookings.

For privacy questions or requests, contact support@primareply.com.