Privacy Policy

Last updated: September 25, 2026

This Privacy Policy explains how ReplyNodes ("ReplyNodes", "we", "us", or "our") collects, uses, shares, and protects information when you use our read-only public data API, remote MCP server, and dashboard at replynodes.com and platform.replynodes.com (the "Service"). The Service retrieves publicly available data from third-party providers on your behalf; it does not connect to your social accounts or publish, schedule, or modify content for you.

1. Information We Collect

We collect the following categories of information:

  • Account information: name, email address, password (hashed), workspace/team details, and billing information processed by our payment provider.
  • API key and request data: the API keys issued to your workspace (stored so that the plaintext value is shown only once) and the read requests you send, such as the provider, route, timestamp, and credits consumed, used to authenticate, meter, and bill for the Service.
  • Usage and log data: IP address, browser type, device information, pages visited, and actions taken in the Service, used for security and reliability.
  • Cookies: used to keep you signed in and remember preferences. See "Cookies" below.
  • Support communications: messages you send to us and the contact details you include.

2. How We Use Your Information

We use the information above to:

  • Provide the Service, including read-only REST and remote MCP data access;
  • Authenticate your account and maintain the security of the Service;
  • Meter credit usage, process payments, and manage subscriptions;
  • Send you service-related communications (e.g. billing and security alerts);
  • Diagnose problems, improve performance, and develop new features;
  • Comply with legal obligations and enforce our terms.

We do not use your request data to serve you advertising, and we do not sell your personal data to third parties.

3. Public Data and Third-Party Providers

The Service retrieves publicly available data from third-party providers on your behalf. We do not ask you for social-network credentials, we do not store them, and we do not post, schedule, or otherwise modify content on your behalf. The providers, routes, and fields available can vary by deployment; current capabilities are published by the Service itself.

4. Agent and MCP Features

When you connect an MCP client or call the REST API, the requests your agent sends to the Service (for example a query, a domain, or an identifier to look up) are processed to return the requested public data. We do not use those requests to train models, and they are not sold or used for advertising.

5. How We Share Information

We share information only in the following circumstances:

  • Service providers: hosting, storage, email delivery, and payment processing providers who process data on our behalf under contractual confidentiality obligations;
  • Public data providers: the third-party sources queried to fulfil the read request you made;
  • Legal requirements: if required to comply with a legal obligation, protect our rights, or prevent fraud or abuse;
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy continuing to apply.

We do not sell your personal information.

6. Data Retention

We retain account and usage data for as long as your account is active. If you close your account, we delete or anonymize your personal data and revoke your stored API keys within 90 days, except where we are required to retain limited records (e.g. billing records) for legal or tax purposes. Usage logs are retained for up to 12 months for security purposes.

7. Data Deletion & Your Rights

You can remove access to your data at any time:

  • Revoke API keys: rotate or revoke workspace API keys from the dashboard so they can no longer be used to access the Service.
  • Delete your ReplyNodes account: email support@replynodes.com with the subject "Delete my account" from your registered email address. We will delete your account, data, and any stored API keys within 30 days, and confirm by email once complete.

Depending on your location, you may also have the right to access, correct, export, or object to the processing of your personal data. California residents have rights under the CCPA/CPRA, and EU/UK/EEA residents have rights under the GDPR. To exercise any of these rights, contact support@replynodes.com.

8. Security

We use encryption in transit (TLS) and at rest, secure storage of API keys, and access controls to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred internationally.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us so we can delete it.

11. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date, and for material changes we will provide additional notice (e.g. by email).

13. Contact

For privacy questions, data access requests, or account/data deletion requests, contact support@replynodes.com.