Privacy Policy

1. Who this applies to

Shop owners and their team members who create a Reploo account ("Sellers"), and the people who send messages to a Seller's connected Facebook Page or Instagram account ("Customers"). We act on the Seller's behalf when handling Customers' messages: the Seller decides what is collected and why, and we process it to provide the service.

2. Information we collect

From Sellers:

• Account details: email address, name of the shop, phone number, and login information.
• Business data the Seller adds: products, prices, stock, orders, team members, delivery settings, and AI instructions.
• Connection data: when a Seller connects a Facebook Page or Instagram account, we receive an access token from Meta, and the Page/account name and ID. Access tokens and courier API credentials are stored encrypted.
• Payment submissions: the transaction ID and details a Seller provides when paying for a plan.
• Usage data: how the service is used (for example the number of AI replies) and basic technical logs.

3. Information about Customers

When a Customer messages a connected Page or Instagram account, Meta sends us, through its official platform, the message content (text, images, voice messages), the Customer's platform-scoped ID, and, where available, the Customer's public name and profile picture. If a Customer places an order, we also store the name, phone number and delivery address they provide in the chat.

We only access conversations of Pages and accounts that a Seller has deliberately connected to Reploo.

4. How we use information

• To show the Seller's conversations in one inbox and let them reply.
• To generate suggested or automatic replies using AI, according to the Seller's products and instructions.
• To create and manage orders, and to book parcels with the courier the Seller selected.
• To send service messages, such as team invitations and account emails.
• To keep the service secure, prevent abuse, fix problems and improve Reploo.

5. Who we share data with

We do not sell personal data. We share it only with service providers that help us run Reploo, and only as needed:

• Meta Platforms (Facebook / Instagram) to receive and send messages through their APIs.
• Google (Gemini API) to generate AI replies. The text, images and voice messages of a conversation (or a post comment) needed to produce a reply are sent to this service.
• Supabase (database and file storage, hosted in Singapore) and Vercel (hosting) to store and serve the application.
• Resend to send emails.
• Courier companies the Seller connects (for example Steadfast, Pathao or RedX), who receive the recipient name, phone number, address and cash-on-delivery amount when a parcel is booked.
• Authorities, when required by law.

6. Data retention

We keep data while the Seller's account is active. A Seller can disconnect a channel or ask us to delete their shop at any time. When a shop is deleted, its conversations, orders, products, files and stored credentials are permanently removed. See our Data Deletion page for how to request this.

7. Security

Access tokens and courier credentials are stored encrypted. Data is protected by per-shop access controls, so one shop cannot see another shop's data. No system is perfectly secure, but we work to protect the information entrusted to us.

8. Your choices and rights

You can ask to access, correct or delete your personal data. Sellers can do most of this inside the app. Customers who want their data removed from a shop's conversation records can contact that shop or us. See the Data Deletion page for the steps.

9. Children

Reploo is for business use by adults. We do not knowingly collect information from children under 13.

10. Changes to this policy

We may update this policy. We will change the "last updated" date above, and for significant changes we will notify Sellers.

11. Contact

Questions or requests: support@reploo.app