Privacy Policy

Last updated October 13, 2026

ReplyAvenue is operated by Firmwise. This policy explains how information is handled on replyavenue.com and in the ReplyAvenue client workspace at campaigns.replyavenue.com.

Information we handle

When you contact us, we receive the information you choose to send, such as your name, email address, organization, and message. Website hosting may generate technical logs, including IP addresses, requested pages, browser information, and request times, for delivery and security.

Within a client workspace, information may include account and user details, contacts supplied by a client, campaign content, email correspondence and attachments, sending activity, replies, and campaign reports. Where a client directs the processing of campaign or recipient information, we handle that information to provide the agreed service on the client’s behalf.

Connected email accounts

When an account owner or authorized administrator connects an email account, the workspace uses the granted access to support email sending, conversation synchronization, reply management, and related reporting. Depending on the connection and permissions granted, this can involve account identifiers, authorization tokens, message content, sender and recipient details, attachments, and message metadata.

Google connections use Google’s authorization process. The account owner grants permissions directly through Google; the OAuth connection does not require giving us their Google password. Mailbox data and connection credentials are processed and stored by the campaign platform and its supporting infrastructure as needed to maintain the connection and provide these functions.

Use of Google user data

Google user data is used to provide the email features that the account owner or authorized workspace user requests. We do not sell Google user data, use it for advertising or audience profiling, or use it to train generalized AI or machine-learning models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Human access to Google message content is limited to access you affirmatively authorize for the service, or circumstances permitted by that policy, such as investigating security issues or complying with law.

How information is used and shared

We use information to provide workspace access, operate requested campaigns and reporting, respond to requests, maintain the service, prevent abuse, and meet legal obligations. Authorized client users and team members may access workspace information according to their assigned permissions.

Service providers support website hosting, campaign processing, email connectivity, and support. The public website is hosted on Vercel; the campaign workspace is provided through EmailBison. Information is shared with providers as needed for those services, with your authorization, or when required by law. We do not sell personal information. Google user data is subject to the additional restrictions above.

Cookies and technical information

The public ReplyAvenue website does not include advertising pixels or optional analytics scripts. The separate client workspace may use cookies or similar storage for authentication, preferences, and essential functionality. Campaign engagement information, such as opens or link clicks, may be processed when those features are enabled for a campaign.

Retention, disconnection, and deletion

Information is kept for the duration needed to provide the service and address security, contractual, or legal obligations. Retention depends on the type of information and the relevant client arrangement.

You can revoke a Google connection through your Google Account connections settings and request disconnection through your workspace administrator or by emailing us. Revoking access prevents future authorized access through that connection; it does not automatically erase information already stored in a workspace. To request deletion of stored account or campaign data, contact team@firmwise.io. We may need to verify your identity and authority and coordinate with the relevant client or platform provider. We will explain any information that must be retained.

Security and processing locations

We use access controls and service-provider safeguards appropriate to the service. No system can guarantee absolute security. Providers may process information in countries other than your own; applicable contractual and legal requirements govern that processing.

Your choices and requests

Depending on applicable law, you may be entitled to access, correct, obtain a copy of, delete, or object to or restrict processing of your information, or withdraw consent. Send requests to team@firmwise.io. If your information belongs to a client-managed campaign, we may direct your request to, or coordinate with, that client. You may also contact your local data protection authority.

Updates and contact

This service is intended for business users aged 18 or older. If this policy changes, we will update the date on this page and provide additional notice or obtain consent where required. New uses of Google user data will be disclosed before that use begins.

Firmwise · Southlake, Texas 76092
team@firmwise.io · firmwise.io