Privacy
Privacy statement
Last updated 16 June 2026
ReplyFlow is an early-access product operated by Dutchcode B.V., a company registered in the Netherlands ("we", "us"). This statement explains what personal data we collect through this website and demo, why, and what control you have over it. We keep it short on purpose — there isn't much.
Who is responsible
Dutchcode B.V. is the data controller. For any privacy question or request, email support@dutchcode.com.
What we collect
- Inbound email you route to us. When you point a ReplyFlow address at your app, we receive, parse and store the emails sent to it (sender, subject, body and attachment metadata) so we can deliver the structured result to your webhook and show it in your dashboard. You own these addresses and can delete the messages, the address, or your whole account at any time.
- Technical & error data. When something breaks, our error-monitoring tool records limited diagnostic information (e.g. browser type, page, the error itself, and an approximate IP address) so we can fix it.
- The live demo runs entirely in your browser. The email text you paste into the demo is processed client-side and is not sent to or stored by us.
- Account details (if you sign in). When you sign in with Google or GitHub, we receive and store your name, email address, profile picture, and the provider's user ID — used only to create and identify your ReplyFlow account. We never receive your Google or GitHub password, and we don't post or act on your behalf.
We do not use advertising trackers and we do not sell personal data.
Legal basis
We process your account details and the inbound email you route to us on the basis of performance of our contract with you (providing the ReplyFlow service). We process technical and error data on the basis of our legitimate interest in keeping the service secure and working.
Who processes data on our behalf
| Provider | Role | Data received | Privacy policy |
|---|---|---|---|
| Cloudflare, Inc. (US) | Hosting, content delivery, and inbound-email processing at the edge | IP address, request metadata, and the inbound email routed to your address | cloudflare.com/privacypolicy |
| Google LLC (US) | Font delivery via Google Fonts (loaded on every page) | IP address and browser user-agent sent to fonts.googleapis.com / fonts.gstatic.com when fonts are fetched | policies.google.com/privacy |
| Functional Software, Inc. (Sentry) (US) | Error monitoring, processed under EU SCCs | Browser type, page URL, the error itself, and an approximate IP address | sentry.io/privacy |
| Stripe, Inc. (US) | Subscription billing for paid plans | Email address, billing details, and payment information (we never see full card numbers) | stripe.com/privacy |
| Ahrefs Pte. Ltd. (Singapore) | Website analytics on marketing pages | IP address, browser user-agent, page URL, and referrer | ahrefs.com/legal/privacy-policy |
These providers act as processors under data-processing agreements with us (with EU Standard Contractual Clauses where data leaves the EU/EEA) and only handle data as needed to provide their service.
How long we keep it
We keep your account and message data for as long as your account is active. Delete a message, an address, or your whole account from the dashboard and the associated data is removed. Error data is retained only as long as needed to diagnose issues.
Your rights
Under the GDPR you can ask us to access, correct, or delete your personal data, or object to our processing of it. Email support@dutchcode.com and we will action it. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
As ReplyFlow grows from an early-access page into a full product, this statement will be updated. The "last updated" date above always reflects the current version.