Chirp Suite

Privacy

Last updated 24 October 2026

Chirp Suite is run by Christopher Ross from Fort Erie, Ontario. This page explains what happens to information when you use the free tools. It follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Who is responsible

Christopher Ross, operating as Chirp Suite is responsible for the information described here. Write to hello@chirpsuite.com or by mail at 210 Gilmore Road, Fort Erie, Ontario L2A 2M3, Canada.

The tools

This covers the reply helper, review insights, post ideas, review requests and the draft check.

  • What you paste or type (a review or message, a batch of reviews, a draft, and the optional notes about your business) is sent to an AI service to write the answer. It is used for that one request and is not kept.
  • Do not paste passwords, card numbers or other private details. If the message you are replying to contains a customer's personal details, remove them first.
  • Nothing is posted or sent to anyone for you.

The wpChirp WordPress plugin

If you use the wpChirp plugin, Chirp Suite runs its tools for your site. Nothing is sent until you press a button in your WordPress dashboard.

  • Kept about a connected site: its address, the plugin and WordPress versions, when it connected and was last used, a one-way fingerprint of its connection token, and a count of the free runs (which tool and when) to apply fair-use limits. Refused or suspicious requests are also written to a short log with a one-way fingerprint of the connection (never the address itself), kept for a few weeks, so abuse can be spotted and a connection that keeps sending refused requests can be paused for a few hours.
  • Not kept: what you typed or pasted, the comments or reviews you sent for review insights, and the answers. The answer goes back to your dashboard.
  • Removed: disconnecting in the plugin, or deleting it, deletes the site and its counts.

Review insights and extra runs in the plugin use your Chirp Suite account and key, and follow the account and API rules below.

What is kept

  • Technical logs. Cloudflare, which delivers this site, keeps standard request logs such as IP address, time and page requested, to keep the site secure and working.
  • Visit counts. Cloudflare Web Analytics counts page visits and the type of device, without cookies and without following you across other sites.
  • Usage counts. We record that a tool ran, which model answered, how long it took and what it cost, with none of the text you pasted. This helps us run the service and prevent abuse.
  • Security check. Cloudflare Turnstile checks that a visitor is a person. It may process technical information about your browser for that purpose.
  • Messages. If you write to us by email or the contact form, we keep your message and our reply so we can help you.
  • Newsletter. If you subscribe, we keep your email address, the page you signed up on, the time and the wording you agreed to. Every email will have an unsubscribe link, and unsubscribing stops all newsletters.

Accounts are optional and only needed to use the API. If you have one, we keep your email address, your projects and API keys (keys are stored only as a one-way fingerprint), your credit balance and a record of each API call: when it ran, which tool, how many credits it cost and whether it worked, with none of the text or pictures you sent. You can sign in with Google or with a one-time emailed link. With Google, we receive your verified email address and name from Google and nothing else: no password, and no access to your mail, files or contacts. Google's own privacy policy covers what Google does. Either way, a cookie keeps you signed in for 14 days. There is no advertising.

History in your dashboard. When you are signed in, each run of a tool is kept in your history so you can look back at it: the written result (which can quote parts of what you pasted) and a short label made from its first words. The rest of what you pasted is not kept. Only you can see your history, you can delete any item from it at any time, and the oldest items are removed once you have more than 200 or when they are older than 180 days. Signed-out use of the free tools keeps nothing, as described above.

Connected accounts. If you connect your Google Business Profile, YouTube, a Facebook Page or Instagram account, we ask only for permission to read, and we never post, reply, edit or delete anything on them. We keep an encrypted access token, the account name, and one small reading of its numbers each day (ratings, review counts, followers, views and how your recent posts did) for up to a year. We also keep your most recent reviews, with the reviewer shown only by first name and last initial, and your recent posts, for 60 days, so a report can count reviews waiting for a reply and name your best post. Bluesky uses public numbers, so nothing is stored for sign-in. Disconnecting deletes the saved numbers and, for Google, cancels the permission on Google's side. Deleting your account does the same for every connection. You can also remove our access any time from the connected-apps page of the service itself. Chirp Suite's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements: we use it only to show you your own numbers and reports, and we never sell it, use it for advertising, or let people read it except where the law requires.

Reports you share. You can turn your reputation report into a link for a client or colleague. The link opens a frozen copy of the numbers, with the business name, client name and note you typed on it. It shows no review text or reviewer names and does not show your account, and we ask search engines to skip it. Anyone who has the link can read it. It stops working when you switch it off, when it is a year old, or when you delete your account. We count how many times it is opened and show you that number.

The advisor

The dashboard has an advisor you can chat with. What you type is sent to an AI model, through Vortops, to write an answer. The advisor cannot see your website or account. Your chats (your questions and the answers) are saved on your account so you can come back to them, and are kept until you delete them from the Advisor page. We also record that you asked, when, and what it cost in credits, so your first free questions can be counted and your credits balance is right. Do not put passwords, card numbers or other secrets in a chat.

Who else handles information

  • Cloudflare hosts the site and runs the AI models used to write replies. Cloudflare states that it does not keep the content of these requests and does not use it to train AI models.
  • Stripe takes card payments if you buy credits or a plan. Your card details go straight to Stripe and never reach us. We keep your Stripe customer reference, what you bought and your invoices.
  • Vortops, an AI service also operated by Christopher Ross, receives each request on the way to the model and records the usage counts above. It does not keep what you paste.

Some of these services process information in the United States or other countries, where authorities may be able to access it under local law.

Your choices

You can download everything we keep about you, or delete your account, yourself from the Your account page in the dashboard. Deleting removes your results, schedules, conversations and keys on every Vortops site and cannot be undone. Payment records are kept without your name or email, because the law requires us to keep them for accounting, and we will not delete an account while a monthly plan is still active. You can also ask what we hold about you, ask us to correct or delete it, or withdraw your consent, by writing to the address above. If you are not satisfied you can complain to the Office of the Privacy Commissioner of Canada.

Children

Chirp Suite is for adults and is not directed at children.

Changes

If this page changes in a way that matters, the date above changes too.