RawReply is a chat product. To make it work we collect three things and send them to four places. That's the whole story. Everything below is the long version.
What we collect
- Your email address and name, from Google when you sign in. We never see or store your Google password — the sign-in happens between your browser and Google. We get back an email + display name and that's it. We don't request access to Gmail, Drive, Contacts, or anything else.
- The messages you send and the responses you get back. Stored on our server so you can come back to a chat later and so we can hand the conversation to the AI on your next turn. Not used for anything else. Not sold. Not used to train any model.
- Usage events — page views, button clicks, whether a response failed, how long it took. Used to figure out what's broken and what people use. Not tied to your chat content. Your email is hashed (irreversibly) before any of this leaves our backend, so the analytics tool sees a pseudonym, not you.
Where it goes
To make the product work, the things above are shared with:
- Anthropic — the company that makes Claude, the AI model that writes the replies. Your messages are sent to Anthropic to generate the response. Anthropic's policy: anthropic.com/legal/privacy.
- AWS Bedrock — used as a backup model when Anthropic is rate-limited. Same situation as above, just a different provider. AWS's policy: aws.amazon.com/privacy.
- PostHog — receives the hashed usage events. Does not receive your chat content. Their policy: posthog.com/privacy.
- Sentry — receives error reports when the site crashes. Email is hashed before it gets sent. Their policy: sentry.io/privacy.
What we don't do
- We don't sell your data to anyone. There's no ad network, no resale partnership, no data broker — just the four providers above, all of which need your data to do their job.
- We don't use your chats to train any model. RawReply doesn't train its own LLM, and the providers above don't use your messages for their model training either when accessed through their APIs (you can verify this in their policies).
- We don't track you across the rest of the web. PostHog is configured for first-party analytics on rawreply.com only.
How to delete your data
Email us at privacy@rawreply.com and we'll remove your account and all of your chats. There isn't a self-serve delete button yet because RawReply is new — if that changes, this page will update.
Sharing your chats
When you click “share” on a chat, we mint an opaque URL like rawreply.com/s/<random-token>. Anyone with that URL can view the chat. If you delete the chat, the share link breaks. The shared URLs aren't listed in our sitemap and are excluded from search-engine indexing — they spread only through links you share yourself.
Cookies
One httpOnly session cookie called ember_session, set after Google sign-in, so the next page load knows you're signed in. No third-party cookies. No advertising cookies.
Children
RawReply isn't intended for users under 13. If we find out an account belongs to someone under 13 we'll delete it.
Changes
If we change what we collect or where it goes, we'll update the date at the top of this page and post a note in the notes. Material changes that affect existing accounts get an email too.
Contact
privacy@rawreply.com. If you don't hear back within a couple of days, assume the email got stuck and try again — there's a real person on the other end.