Privacy Policy
Last updated: 20 October 2026
ReplyLoop is a shared inbox and CRM for businesses that talk to their customers on WhatsApp. This policy explains what information we handle, why, and the choices you have.
Who is who
The business that signs up for ReplyLoop ("the customer") decides which WhatsApp conversations and contacts go into its workspace. For that customer data we act as a service provider on the customer's behalf. For the account details of the people who sign up, we are the one responsible for the data.
Information we handle
- Account details: your name, business name, email address and a password (stored only as a secure hash by our login provider).
- WhatsApp connection details that you enter in Settings: phone number ID, business account ID, access token and app secret. The token and secret are encrypted before they are stored.
- Conversation data: the phone numbers, names, messages, delivery status and timestamps of the customers who message your WhatsApp number, plus the replies and private notes your team writes.
- Contact information you add yourself, such as names, phone numbers and tags.
- Basic technical logs, such as request times and error messages, used to keep the service running.
How we use it
- To show your conversations to your team and let you send and receive WhatsApp messages through Meta's official WhatsApp Business Platform.
- To run, secure and fix the service, and to manage your free trial and subscription.
- To contact you about your account or important changes to the service.
We do not sell personal information and we do not use your customers' messages for advertising.
Who we share it with
- Meta Platforms, which delivers WhatsApp messages and sends us incoming messages and delivery updates.
- Our infrastructure providers: Vercel (hosting) and Supabase (database and login).
- Authorities, only where the law requires it.
Security
Access tokens and app secrets are encrypted. Each workspace can only see its own data. Incoming webhook messages are verified with Meta's signature before they are accepted. No system is perfectly secure, so please keep your password private.
Retention and deletion
We keep your data while your account is active. You can ask us to delete your account and the conversation data in it at any time. See the data deletion page for how to ask.
Your choices
You can ask for a copy, a correction or deletion of your data by writing to us. Customers who messaged a business on WhatsApp should contact that business first, because the business controls its own conversation data.
Changes
If we change this policy we will update the date above and, for important changes, tell account holders by email.
Contact
Questions about this policy: jkzonedigitalseva@gmail.com