Privacy Policy - Replyzen

This policy describes how the operators of a Replyzen installation handle personal data. Each Replyzen platform is operated by its platform owner; contact them for data requests.

What we collect

Accounts: name, email address, hashed password.
Business data: the workspace's products, knowledge entries and settings.
Customer conversations: messages that businesses and their customers exchange over connected Messenger and WhatsApp channels, including names, phone numbers, addresses and order details provided by those customers.
Operational data: audit logs, rate limiting records, email logs, usage counters.

How it is used

To provide the service: answering messages, creating and managing orders, sending confirmation emails.
To secure the platform: rate limiting, abuse prevention, audit trails.
To meter plan usage and operate subscriptions.

AI processing

To generate replies, message text is sent to the AI provider configured by the workspace owner. The provider configuration, model and endpoint are controlled by the workspace owner in Settings. Do not configure a provider if this conflicts with your obligations to your customers.

Third parties

Replyzen communicates with Meta platforms (Facebook Messenger, WhatsApp) as required to deliver messages, and with the configured AI provider and SMTP service. No data is sold. Tokens and secrets are stored encrypted at rest and are never exposed to the browser.

Retention and deletion

Data is retained while the workspace is active. Deleting a workspace removes its products, customers, conversations, messages and orders through database-level cascades. Audit logs are retained for security purposes.

Your rights

Requests regarding access, correction or deletion of personal data should be directed to the platform owner of the Replyzen installation you use, using the contact details on the Contact page.

Children

The service is intended for business use and is not directed at children.