ReplyChat
ReplyChat
Back to Home
Privacy & Data Protection

Privacy Policy

Last Updated: August 29, 2026 • Effective Date: August 29, 2026

1. Introduction

At ReplyChat ("we", "us", "our"), we respect your privacy and are committed to protecting the personal information of our users and their customers. This Privacy Policy explains what information we collect, how we process it, and your rights under applicable privacy laws (including GDPR and CCPA).

2. Information We Collect

A. Account & Profile Information:

  • When you sign in with Google, we receive your name, email address, and profile picture avatar.
  • When you connect Instagram, we receive public metadata such as your Instagram Username, Account ID, and Business Profile ID.

B. Interaction & Messaging Data:

  • Comments and direct messages received on your connected Instagram accounts to evaluate your configured automation rules.
  • Conversion analytics (e.g., automated DMs sent, trackable link clicks, CRM tags applied).
🔒 Zero Meta Token Storage Policy: ReplyChat never stores long-lived Meta OAuth access tokens or account passwords in its primary databases. Instagram token refresh and cryptographic handshakes are delegated securely to Zernio infrastructure.

3. How We Use Your Information

  • To execute automated Comment-to-DM and keyword responses on your behalf.
  • To sync conversation threads to your Live Sales Inbox.
  • To display customer lead tags and conversion attribution analytics.
  • To process subscription payments and manage invoices via Stripe.
  • To provide customer support and critical account notifications (e.g., token disconnection alerts).

4. Third-Party Service Providers

We share data with trusted third-party infrastructure providers strictly to deliver our services:

  • Zernio Platform: Instagram Graph API infrastructure, rate-limit management, and webhook delivery.
  • Neon Cloud: Serverless PostgreSQL database hosting encrypted application data.
  • Google LLC: Identity authentication via Google OAuth 2.0.
  • Stripe, Inc.: Secure payment processing and subscription billing.
  • Vercel, Inc.: Edge web application hosting.

5. Data Retention & Deletion (Meta Compliance)

We retain message logs and CRM contact data only for as long as your workspace is active or as necessary to provide analytics reports.

User Data Deletion: In compliance with Meta Platform Policies, you may request complete deletion of your data at any time:

  1. Navigate to Settings ──► Disconnect Instagram to revoke access.
  2. Or click Delete Account in Settings to wipe all workspace data instantly.
  3. Or email us at contact@replychat.app with the subject "Data Deletion Request".

6. Security Measures

We implement industry-standard security practices, including TLS 1.3 encryption in transit, timing-safe HMAC-SHA256 signature verification on incoming webhooks, parameterized SQL queries to prevent injection attacks, and strict workspace tenant data isolation.

7. Contact Information

If you have any questions or concerns regarding this Privacy Policy, please contact our Data Protection team at: contact@replychat.app