Updated July 30, 2026
Privacy Policy
This Privacy Policy explains how replyt, operated by 株式会社 VLC International ("VLC International", "we", "us"), collects, uses, and protects information when you use the replyt service. By using replyt, you acknowledge this Policy.
1. Who we are
replyt is a product of 株式会社 VLC International (Tokyo, Japan). For privacy inquiries, contact us via the contact page.
2. Information we collect
Depending on how you use replyt, we may collect:
- Account information: from Google or Microsoft sign-in (such as name, email address, and profile image) stored in your replyt profile.
- Billing information: if you subscribe to a paid plan. Card processing is handled by our payment provider (Pay.jp). We store subscription status and provider customer IDs, not full card numbers.
- Inbox review activity: when you use the product: suggested drafts, your edits, and approve / reject / archive / send actions.
- Writing profile and samples: derived from approved or edited replies, plus optional background notes you provide.
- Mail and calendar data you authorize: when Gmail, Outlook, and Calendar features are enabled for your account, limited to the scopes you grant.
- Diagnostic and security logs: required to operate, debug, and secure the service (for example technical events, approximate usage metrics, and abuse signals).
3. How we use information
- To authenticate your account and connect Google or Microsoft services.
- To classify unread email, prepare suggested replies, and generate your morning briefing.
- To personalize tone and voice for your account using your writing profile and history. We do not use your mailbox content to train a shared public foundation model for other customers.
- To process subscriptions and provide customer support.
- To protect the service, prevent abuse, and comply with legal obligations.
4. Sending email
replyt prepares suggested replies for your review. A reply is only sent through your connected Gmail or Outlook account after you explicitly approve a send action.
5. Google and Microsoft API services
replyt's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect Microsoft Outlook or Calendar, we process mail and calendar data only to provide the features you request, within the permissions you grant, and subject to Microsoft's applicable terms and policies.
6. Subprocessors and sharing
We do not sell your personal information. We use carefully selected providers to host infrastructure, authentication, AI drafting, email delivery, and payments. Those providers process data only to help us operate replyt and are expected to protect it under appropriate contractual and technical measures.
We may disclose information if required by law, to protect rights and safety, or in connection with a corporate reorganization, always subject to applicable privacy obligations.
7. Data retention
Synced inbox copies and drafts that have been sent, archived, rejected, or marked no-action are automatically deleted from our systems within about 24 hours. Your Gmail or Outlook mailbox remains unchanged by this cleanup.
We keep a compact writing profile and a limited set of approved reply samples so replyt can learn your preferred tone. Account, billing, and legal-acceptance records are retained while your account is active and as needed to provide the service, meet legal requirements, or resolve disputes.
8. Security and residual risk
We apply industry-standard safeguards, including encrypted transport (HTTPS), access controls, least-privilege server credentials, and row-level database policies so users can normally access only their own records. We also work to reduce common web risks through ongoing engineering controls.
No online service can guarantee absolute security. Despite our efforts, unauthorized access, software defects, provider outages, social engineering, or other events may still lead to loss, alteration, or disclosure of information. By using replyt, you understand and accept that residual risk.
If we become aware of a security incident that materially affects your personal data, we will take reasonable steps to investigate, contain the issue, and notify affected users and authorities where required by applicable law.
9. International transfers
Your information may be processed in Japan and other countries where we or our providers operate. Where required, we use appropriate safeguards for such transfers.
10. Your choices and rights
- Disconnect Google or Microsoft access from your provider account settings and within replyt connections.
- Request access, correction, or deletion of personal data via the contact page.
- Cancel a paid subscription at any time according to the billing terms.
- Stop using the service and request account closure.
11. Children
replyt is not directed to children under 16, and we do not knowingly collect personal information from children.
12. Changes
We may update this policy from time to time. Material changes will be reflected on this page with an updated date. Continued use after an update constitutes acknowledgment of the revised Policy, except where mandatory law requires a different form of consent.