Privacy Policy — ReplyFit
Where it runs. Only on X (twitter.com and x.com) and Instagram (www.instagram.com), the sites listed in its permissions. It does nothing anywhere else.
What stays in your browser. When you open someone's profile, the extension reads whether it shows "Follows you" (X) or "Follow Back" (Instagram) and remembers that answer, with the handle and the date, in your own browser for 30 days. This is never sent anywhere except as part of a draft request below. The extension never opens profiles, follower lists or following lists by itself.
What we process when you press Write reply, Refine or a post tool. When you click Reply or go into a reply or post box, ReplyFit only shows its small orange button; nothing is read or sent, even when you press the button. When you press Write reply, the extension reads the text of the post or comment you are replying to and the author's handle, and sends them to our server together with whether that person follows you (yes, no or unknown), the tone and kinds of reply you picked, any words you typed into the panel, and your style settings: length, your "never use" list and your optional line about yourself. When you press Refine what I wrote, it sends the same post details and settings plus the reply you typed in the site's reply box. When you are writing a new post on X and press Make it viral, Rewrite & format or Make it a thread, it sends what you typed in the post box and your style settings; when the post box is empty and you press Write a viral post, it sends the topic you typed in the panel (or, if you left it empty, your line about yourself) and your style settings. There is no other post or handle involved. Nothing is sent for posts you only scroll past, or when you open the panel and close it without pressing one of those buttons.
What our server does with it. Our server builds a fixed instruction from your settings and choices and passes it, with the post text and handle (and, for Refine, your own reply; for a new post, only what you typed), to Anthropic, whose model writes a reply (or a version of your post, or a thread); if that misses one of the checks below, it writes one more. It then passes the post text, your style settings and each option to TypeSafe AI, whose Jev model checks it (does it sound human, is it about the post, does it do what you asked, does it match your voice and "never use" list, and for Refine and posts, does it keep your meaning; for a post, does it open strongly). The options and the names of any failed checks go back to your browser. Our server does not keep the post, the handle, your settings, the words you typed or the replies.
What Anthropic and TypeSafe AI do with it. Both process the text on our behalf, under their commercial terms, which do not allow training their models on it. Each keeps request data for a limited period to provide the service and to prevent abuse; we do not control that period. Both are hosted in the United States. See https://www.anthropic.com/legal/privacy and https://typesafe.ai/legal/privacy-policy.
What we store about you.
- A random identifier created when you install the extension, with the date of its first draft (so a new install gets its first days' bigger free allowance). It counts your drafts for the day and holds your licence. It is not linked to your name or email. If you use Chrome sync, it syncs with your settings, so your other Chrome profiles and a reinstall keep the same one.
- A daily count of drafts made from your network address, and the dates of the last two new installs that started their bigger first-days allowance from it (kept 30 days), to stop abuse of the free tier. The count resets each day, and neither records anything about what was drafted. For IPv6, the network is counted (the first half of the address), not the full address.
- If you have a paid plan, the drafts used with your licence today and this billing month, across your browsers, filed under a one-way fingerprint of the key.
- Your settings, kept in your own browser. They sync between your own Chrome profiles through your Google account if you use Chrome sync; we never receive them except as described above.
What we never collect. Your password, messages, followers list, account details, browsing history, or the addresses of the pages you visit. The extension contains no analytics or advertising code.
What it never does. It never posts, likes, replies, follows, unfollows, reports or blocks anything. Pressing Use puts the reply or post you picked into the box on your screen, and Copy puts a thread's posts on your clipboard for you to paste; posting is always your click.
Payments. Handled by Dodo Payments, our merchant of record. We receive a licence key and whether it is active. We never see your card details.
Who else handles data. Cloudflare (hosting our server, worldwide), Anthropic (writing drafts, United States), TypeSafe AI (checking drafts, United States), Dodo Payments (payments). If you are in the UK or EU, this means the post text and your settings are transferred to the United States when you ask for a draft.
Your rights. Uninstalling the extension deletes what it keeps on this device; if you use Chrome sync, your settings and install identifier are kept in your Google account and come back if you install it again. Install records that stay unused for 90 days are deleted from our server automatically, except one that holds a licence. To delete yours sooner, email support@codewithkolin.com.
Last updated: 2026-10-13