Privacy Policy

Information we collect

• Contact information — your mobile phone number.
• Message content — the messages you send to and receive from a business.
• Conversation metadata — timestamps, channel (SMS or WhatsApp), and delivery status.
• Business information — for businesses that sign up, account, contact, and billing details.

How we use information

• To deliver the messaging service: receive your messages, generate and send replies on the business's behalf, and send appointment reminders or confirmations you have agreed to.
• To operate, maintain, secure, and improve the service.
• To comply with legal obligations.

SMS and text messaging

If you message a business that uses Reploy, or provide your number when booking or inquiring and agree to receive texts, you may receive text messages from that business. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

We do not sell or rent your information. No mobile information (including phone numbers) will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party. We share information only with service providers that help us operate the messaging service — for example, our messaging carrier and AI processing provider — under confidentiality obligations, and only as needed to provide the service or as required by law.

Google user data

Connecting a Google account is optional. A business owner may connect Google Calendar so that Reploy can manage the appointments it books. Nothing happens until the owner signs in with Google and grants access, and access can be revoked at any time from Settings in the Reploy app or from the owner's Google Account permissions page.

Scopes we request, and why:

• See your calendars and events (.../auth/calendar.readonly) — to check which times are already busy, so Reploy never offers a customer a slot that is taken.
• View and edit events on your calendars (.../auth/calendar.events) — to create an appointment when a customer books, and to update or delete it if the booking changes or is cancelled.

What we do with it. We store the tokens needed to keep the connection working, the identifier of the calendar you chose, and the identifiers of the events Reploy itself created. Availability — whether a time is free or busy — is used to answer the customer's scheduling question in that conversation. We do not read the contents of your other events for any other purpose.

What we never do. We do not sell Google user data, use it for advertising, or use it to develop, improve or train generalised AI or machine-learning models. We do not transfer it to others except as needed to provide this feature, for security purposes, or to comply with applicable law.

Limited Use. Reploy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Deletion. Disconnecting Google Calendar deletes the stored tokens and calendar identifier. Deleting your Reploy account removes them as well — see deleting your account. Appointments already written to your own Google Calendar remain in your calendar, under your control.

The Reploy Android app

The Reploy app for Android asks for the following device permissions. Each is used only for the feature named, only while you use it, and none of this data is sold or used for advertising.

• SMS and MMS — Reploy can act as your phone's messaging app so it can read and send texts on your own number, which is how it answers customers on the SMS channel and how it sends payment links from your number.
• Contacts — to show a customer's name instead of a bare phone number, and to let you pick who a message or payment link goes to. Contacts stay on your device unless you save one to Reploy yourself.
• Calendar — to show your bookings and write new ones you accept.
• Microphone — only when you record a voice note for the assistant. The recording is transcribed and then discarded.
• Location — required by Stripe to accept a contactless card payment with Tap to Pay. It is collected by Stripe at the moment of a payment to meet card network rules, and Reploy does not track or store your location.
• Phone — to place a call from a customer's record using your phone's own dialler.
• Notifications — to alert you when a customer needs you.

Card details are entered into Stripe and never reach Reploy's servers. You can withdraw any permission at any time in Android Settings; the feature that depends on it stops working and the rest of the app continues.

Data retention

We retain messages and related data for as long as needed to provide the service and as required by law, then delete or anonymise it.

Security

We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is 100% secure.

Your choices

You can opt out of text messages at any time by replying STOP. To request access to or deletion of your information, contact us using the details below, or see deleting your account.

Children

The service is not directed to children under 13, and we do not knowingly collect their information.

Changes

We may update this Policy. The effective date above reflects the latest version.

Contact

Reploy, a product of Yoyo Technology
Email: info@reploysolutions.com
Website: reploysolutions.com