StarReply · Privacy

Privacy Policy

Last updated November 6, 2026

This page explains what StarReply handles when you try the demo, create an account, save reply history, or manage a plan. StarReply is copy-and-paste only: it does not connect to Google Business Profile, read Google reviews, or post replies for you.

Information you provide or create

  • Account and sessions: your email and password credential for email-and-password sign-in. Session records can include an IP address and user-agent string. A session is configured to expire after 30 days and update on a 7-day interval.
  • Business profiles: business and location names, sign-off name, follow-up phone number or email, tone preference, and details you ask StarReply to always mention or never mention.
  • Saved reply history: the full original review text, business type, detected sentiment, generated reply options, associated location name, and the date and time the record was created. The app also tracks your reply usage count.
  • Billing records: plan, subscription status, current billing-period end when available, and checkout-attempt and Stripe Checkout session identifiers. StarReply does not store card numbers.
  • Launch alerts: the email address you enter to ask for a launch notification. It may be different from your account email.

Review text and AI drafting

For a signed-in reply request, StarReply runs a best-effort, rule-based redaction over review text, then sends the redacted text, business type, and saved profile preferences to the Polsia AI proxy to draft replies. Profile preferences can include your business name, sign-off name, follow-up contact, tone, and always/never-mention instructions.

Redaction can miss personal details. The original, unredacted review text stays in your StarReply account history alongside the generated replies. For a Pro monthly themes summary, selected positive and negative reviews from the requested month (up to 500) are redacted and sent to the Polsia AI proxy; neutral and mixed-sentiment records are not included in that request.

Polsia’s AI proxy processes the information described above. StarReply has not verified upstream provider logging or retention terms, so this policy does not promise that no provider-side logging or retention occurs or state a provider retention period.

The no-sign-up demo

The anonymous demo sends redacted review text and the selected business type to the Polsia AI proxy. The demo route does not write reviews or replies to account history. If you choose to save your demo drafts, your browser temporarily stores the original review text and drafts in sessionStorage so they can be transferred after sign-up. When that transfer succeeds, StarReply saves the original text and replies to your account history and removes the temporary browser entry.

Where information is processed

StarReply stores its app records in a database provisioned through Polsia. Password reset emails, verification emails that you request, and launch-alert notifications use Polsia’s email or submission services. A launch-alert address is saved by the app and sent to Polsia’s submission service; when that service does not record the request, StarReply sends a notification through Polsia’s email proxy.

Subscription checkout and the customer portal are hosted by Stripe and reached through Polsia’s billing integration. StarReply stores billing metadata and checkout identifiers for account status; card numbers are handled on Stripe-hosted pages and are not stored in StarReply’s app database.

Cookies and browser storage

StarReply uses an authentication cookie to keep you signed in. The selected theme is saved in browser storage. Pending demo drafts use sessionStorage only when you choose to save them after trying the demo.

When the Polsia page-view beacon is enabled for a deployment, it sends a page-view request to Polsia with a randomly generated visitor ID stored persistently in localStorage. The beacon is conditional on the deployment configuration.

History, location removal, and account deletion

StarReply does not set a fixed retention period for saved review history. Removing a business location removes that location profile, but leaves its existing review and reply history in your account.

You can request account deletion from account settings after paid access has ended. The deletion flow removes the account and its linked StarReply app records, including saved history, business profiles, usage, billing metadata, and linked launch-alert records. It does not delete records held by Stripe or remove information already processed by external services.