Privacy Policy

This policy explains what ReportReplay ("we") collects when you use the service, and what we do not collect. The short version: the files you work with stay on your computer.

1. Your files stay in your browser

The exports and reports you drop into ReportReplay (rent rolls, resident lists, delinquency reports, pricing sheets and the like) are opened, combined and turned into a workbook inside your web browser. They are not uploaded to our servers and we never store them. Reference files you choose to keep with a report, such as a pricing sheet, are saved in your own browser's storage on your device and can be removed at any time from the report's page.

2. What the AI sees, and only when you ask

When you ask ReportReplay to learn, fix or change a report, your browser prepares a short summary of your files and sends it to our server, which passes it to our AI provider [Anthropic, PBC]. The summary contains column headers, value types, row counts, the layout of your finished report and at most 25 sample rows per file. Before it leaves your browser, names, email addresses, phone numbers and street addresses are replaced with consistent stand-ins. We do not log or keep this summary or the AI's answer, beyond what is needed to return the answer to you. [Attorney: confirm the provider's data retention and training terms for API traffic and describe them here.]

Running a saved report never uses the AI and sends nothing about your files anywhere.

3. What we store

• Account: your email address, used to sign you in with a one-time link.
• Saved reports: the steps of each saved report (column names, filters, formulas, layout), earlier versions of them, and the email addresses you share a report with.
• Plan and usage: your plan, each AI request with its date, size and the credit it used, and your AI credit top-ups.
• Billing: handled by our payment processor [Stripe, Inc.]. We keep the customer and subscription identifiers they give us, not your card details.

A saved report's setup can contain words from your files: column headers, and values you or the AI wrote into a step (for example a unit status such as "Notice"). Please do not type personal information about residents into a report's setup.

4. What we do not do

• We do not use analytics, advertising or tracking cookies.
• We do not sell or rent personal information.
• We only use cookies needed to keep you signed in.

5. Service providers

We use [Supabase] to host accounts and saved reports, [Vercel] to host the website, [Anthropic] for AI report building and [Stripe] for payments. Each processes data only to provide its part of the service. [Attorney: list data processing agreements and hosting regions.]

6. Keeping and deleting your data

You can delete any saved report at any time. To delete your account and everything stored with it, contact us at [support email]. [Attorney: set retention periods, including backups and billing records required by law.]

7. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal information. Contact us at [support email]. [Attorney: add state-specific (for example CCPA) and international terms as needed.]

8. Changes and contact

We will post changes to this policy here and update the date above. Questions: [company legal name, address, support email].