Compliance and guardrails

The founding constraint: no automatic posting

ReplyPilot drafts; a human sends. The extension can place text in Reddit's native comment box, and it has no capability to submit a reply on your behalf. This is the product's hard line, and it exists for two reasons:

• Reddit's content policy treats spam automation as spam. Account-level automation of posting is exactly the behavior communities and the platform are built to detect and remove.
• Communities reward judgment. The difference between a welcome reply and an unwelcome one is usually context a person catches and a script misses.

How drafts are constrained

• The reply prompt is locked server-side to follow the Reddit Content Policy: helpful, on-topic, no spam, no vote manipulation, no impersonation.
• Each subreddit's official rules, unwritten norms, and writing style are distilled into a knowledge profile and injected into the draft context, so replies are written for that specific community.
• A humanizer pass removes typical AI phrasing before you paste.
• An account risk check warns you when the account you are posting from looks thin or new — the situations where a well-meaning reply is most likely to be filtered.

What to avoid

• Posting the same message in many subreddits. It is the textbook spam pattern, and both moderators and the platform act on it quickly.
• Promotional replies in unrelated threads. Answer the question first; mention your product only when the question is about it, and disclose that it is yours.
• Ignoring per-subreddit rules. Many communities restrict links, self-promotion, or posting formats. A rule-breaking reply is removed regardless of quality.
• Posting at volume from a new account. Build history before frequency; the account risk check is a warning, not a clearance.

Data handling

The extension's runtime data flow has four parts:

1. Post and comment context you choose to draft from, sent to generate the draft.
2. A read-only check of your Reddit sign-in state so the extension can tell you whether you are logged in — credentials are never stored.
3. Subreddit knowledge learned for you (rules, norms, style), shared across the workspace to avoid redundant learning.
4. Billing and credit records for the actions you run.

Browsing history is not collected. Full details are in the privacy policy. The policy, and this page, are written to cover what the product actually does — if a future feature changes the data flow, these documents are updated with it.