Privacy Policy
Last updated: July 12, 2026
1. Scope and Legal Basis
This Privacy Policy explains how LocalReplyBot ("we", "us") collects, uses, and protects personal data when you use our service. We process personal data in accordance with the Personal Data Protection Act of Taiwan, R.O.C. (個人資料保護法, "PDPA") and, where applicable, other data protection laws.
2. Personal Data We Collect
Review text you paste into the Service may contain personal data of third parties (your customers). You are responsible for ensuring you may lawfully submit such content; we process it solely to generate your reply and for the purposes below.
3. Purposes of Collection
We collect and use personal data to: (a) provide, operate, and improve the Service, including generating reply drafts; (b) authenticate your account and send login links; (c) deliver LINE notifications you have enabled; (d) process subscription payments and issue invoices; (e) provide customer support; (f) produce aggregated, non-identifying usage statistics; and (g) comply with legal obligations. We do not sell personal data, and we do not use your review content to train our own or third parties' AI models.
4. Third-Party Processors
We share data with the following processors only to the extent necessary to operate the Service. Some processors are located outside Taiwan; such cross-border transfers are made under the PDPA with appropriate contractual safeguards.
5. Data Retention
We retain personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or irreversibly anonymize your personal data within 30 days, except for records we are legally required to keep (e.g., invoicing and tax records, retained for the period required by Taiwanese law) and data in encrypted backups, which is purged on the backup rotation cycle of no more than 90 days.
6. Your Rights
Under Article 3 of the PDPA, you may: (a) inquire about and request to review your personal data; (b) request a copy; (c) request correction or supplementation; (d) request cessation of collection, processing, or use; and (e) request deletion. To exercise any of these rights, email privacy@localreplybot.tw from your registered address. We respond within 15 days for review/copy requests and within 30 days for correction or deletion requests, as required by the PDPA. Exercising these rights is free of charge except where the law permits a reasonable cost for copies.
7. Security
Data is encrypted in transit (TLS) and at rest. Access tokens (including Google OAuth tokens) are stored encrypted and used solely to provide features you have connected. Access to production data is restricted to authorized personnel on a need-to-know basis. In the event of a data breach affecting your personal data, we will notify you and the competent authority as required by the PDPA.
8. Changes and Contact
We may update this Policy; material changes will be announced by email or in-app notice at least 14 days before taking effect. For privacy questions or requests, contact privacy@localreplybot.tw.