AcornReply
Sign in

Privacy Policy

Effective 2026-05-13

Operator

AcornReply is operated by PerfSpot LLC, a Delaware limited liability company. This policy explains what we collect, why, and how to control it. You can reach us through our contact page.

What we collect

Account data (email, name, organization), inbound and outbound message content, customer-supplied contact-form data, and standard server logs (IP, user agent, timestamp). We do not collect device fingerprints or set advertising cookies.

Sign-in providers

You can sign in with Google. We request the minimum profile scopes (openid, email, and profile) to identify you and provision your account. We do not request access to your Gmail, Calendar, Drive, Contacts, or any other Google API.

Google API Services User Data Policy — Limited Use

AcornReply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide or improve user-facing features that are prominent in AcornReply's user experience (signing you in, identifying your account, displaying your name and avatar in the app).
  • We do not transfer Google user data to third parties except as necessary to provide or improve those user-facing features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
  • We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
  • We do not allow humans to read Google user data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes (such as investigating abuse), to comply with applicable law, or our use is limited to internal operations and the data (including derivations) has been aggregated and de-identified.
  • We do not sell Google user data, and we do not use it to train generalised or third-party machine-learning models.

Revoking Google access

You can revoke AcornReply's access to your Google account at any time:

What we share

We share data only with service providers that help us run AcornReply: Postmark (email delivery), Cloudflare Turnstile (bot protection on public contact forms), Neon (database hosting), Railway (application hosting), and Anthropic / OpenAI (AI drafting). Each processor receives only what it needs and is bound by data protection terms. We do not sell or rent your data. We do not use your message content to train third-party AI models beyond the single inference call required to draft the reply you requested.

Cookies

We use a single first-party session cookie issued by our own auth service. We do not use third-party analytics, tracking, or advertising cookies.

Your choices

You can export your data on request and delete your account from settings at any time. Deletion removes conversations, customers, drafts, and your voice profile from our database within 30 days; backups are overwritten on a rolling 30-day cycle.

Email communications

When you create an account, you'll receive transactional emails (sign-in links, account changes, billing, material service changes) and occasional product updates about AcornReply. You can opt out of product updates at any time using the unsubscribe link in any email or from your account settings. Transactional emails are required to use the service and cannot be opted out of while your account is active. We do not share your email address with third parties for their own marketing.

Data retention

Conversation data is retained for as long as your account is active. Deleted accounts and their conversation history are purged within 30 days.

Children's data

AcornReply is not intended for anyone under 13 (or 16 in the EU). We do not knowingly collect data from children.

Where we operate

AcornReply runs on infrastructure in the United States. By using the service you acknowledge your data is processed in the US.

Changes to this policy

We will post material changes to this page and update the effective date at the top. For significant changes affecting how Google user data is used, we will notify affected users by email before the change takes effect.

Contact

Privacy questions or data-subject requests: please use our contact page.