Privacy Policy
Last updated: June 2026
General
This Privacy Policy applies to the Repply service. The policy is drafted in accordance with applicable privacy law.
Information We Collect
- Identity info: name, email, phone — collected at registration.
- Business info: business name, WhatsApp number, knowledge base.
- Conversation data: WhatsApp messages exchanged between your customers and the AI agent are processed and stored to provide the service.
- Usage info: technical logs, session data.
- Payment info: processed directly by payment processor (not stored by us).
- Cookies: for authentication and improved user experience.
How We Use Information
- Providing and operating the service
- Sending account-related updates
- Improving and developing the service
- Legal compliance
- Preventing misuse
Data Flow — How Messages Are Processed
When a customer sends a WhatsApp message to your business number, the following occurs:
- The message is received by a third-party WhatsApp connection provider and forwarded to our servers.
- The message content is sent to a third-party AI processing provider to generate a reply.
- The reply is stored in our database and sent back to your customer via the same provider.
By using this service, you acknowledge and consent to this data flow on behalf of yourself and your customers.
Third Party Sub-Processors
We do not sell or rent personal data. Data is shared only with the following service providers acting on our behalf:
- Green API — WhatsApp connection infrastructure; receives and forwards message content (Israel/EU)
- Groq — AI inference for generating bot replies; processes message content (US)
- Supabase — database and storage (US, SOC 2 compliant)
- Vercel — website and API hosting (US)
- Resend — email delivery (US)
All transfers are made under data processing agreements in accordance with applicable law.
Data Security
We implement reasonable security measures: HTTPS/TLS encryption, access controls, isolated environments. Absolute security cannot be guaranteed.
Your Rights
- Access: request a copy of your data
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and data
- Objection: opt out of marketing use
To exercise these rights: support@repplyme.com
Data Retention
We retain your data while your account is active. Upon account closure, data is deleted within 30 days, except where required by law.
Cookies
We use essential cookies for authentication and settings. We do not use advertising tracking cookies. Cookies can be managed through your browser settings.
Minors
The service is intended for business owners and not directed at minors under 18. If we learn that a minor's data was collected, we will delete it immediately.
Policy Changes
We may update this policy from time to time. Material changes will be published on this page and notified by email.
Contact
Privacy questions: support@repplyme.com or via contact form