Handing over your Google profile is a matter of trust
To reply to your reviews on your behalf, an application needs access to your Google Business Profile. Before the time saved, the first question is therefore security: who accesses what, where your data is stored, and how to take back control.
ReplyTop's technical safeguards
- OAuth 2.0 sign-in: you authorize ReplyTop from your Google account, through "Sign in with Google". Your Google password never passes through our servers.
- Data hosted in the European Union (Ireland) with Supabase, which is SOC 2 Type 2 compliant, with AES-256 encryption at rest and TLS in transit1.
- Payments handled by Stripe: your bank details never pass through our servers.
- Access you can revoke at any time: one click in your dashboard disconnects your Google account.
You choose the level of automation
On Google, Auto-Pilot publishes replies without any action on your part. You can also turn it off and approve each reply yourself. Either way, reviews under 3 stars stay as drafts by default, until you give the go-ahead.