Privacy Policy
Last updated: April 13, 2026
At ReplyMe ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information when you use our website at heyreplyme.com and our AI-powered WhatsApp automation service (collectively, the "Service").
Please read this policy carefully. By using the Service, you agree to the practices described here.
1. Who We Are
ReplyMe is operated by PT. Alexa Solusi DIgital, incorporated in Indonesia.
- Registered address: Jakarta, Indonesia
- Data controller contact: hello@heyreplyme.com
2. Information We Collect
We collect the following categories of personal data:
| Category | Examples |
|---|---|
| Identity data | Name, username, business name |
| Contact data | Email address, phone number, WhatsApp number |
| Financial data | Billing address, payment method (processed via our payment provider; we do not store full card details) |
| Transaction data | Subscription plan, billing history, invoices |
| Technical data | IP address, browser type, device identifiers, cookies |
| Usage data | Features used, pages visited, session duration |
| WhatsApp conversation data | Messages processed through the platform on behalf of your business (see Section 4) |
| Communications data | Emails and support messages you send us |
We do not intentionally collect sensitive personal data (for example racial origin, health data, or political opinions). Please do not submit such data through the Service.
3. How We Collect Your Data
- Directly from you when you sign up, subscribe, fill in forms, or contact support
- Automatically via cookies, analytics tools, and server logs when you use our website or app
- From third parties such as payment processors (for example Stripe), WhatsApp Business API providers, and analytics partners
4. WhatsApp Data Processing
When you connect your WhatsApp Business number to ReplyMe:
- You are the data controller for your customers' data. ReplyMe acts solely as a data processor on your behalf.
- We process WhatsApp messages only to provide the automation service you have configured.
- We do not use your customers' conversation data to train AI models or for any purpose beyond delivering the Service to you.
- You are responsible for ensuring your use of ReplyMe complies with WhatsApp's Business Terms of Service and any applicable laws regarding your customers' data.
5. How We Use Your Information
We use your personal data for the following purposes:
- To provide the Service including account setup, WhatsApp automation, and AI reply generation
- To process payments including billing, invoicing, and subscription management
- To provide customer support including responding to inquiries and resolving issues
- To improve the Service including analyzing usage patterns, fixing bugs, and developing new features
- To communicate with you including service updates, security alerts, and, with your consent, marketing emails
- To comply with legal obligations including responding to lawful requests from authorities
- To enforce our Terms of Service including detecting fraud or misuse
We will never sell your personal data to third parties.
6. Legal Basis for Processing (GDPR & Indonesian PDPA)
For users in the European Economic Area (EEA) or where the Indonesian Personal Data Protection Law (UU PDP) applies, we process your data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing the Service | Performance of a contract |
| Processing payments | Performance of a contract |
| Improving the Service | Legitimate interests |
| Marketing emails | Consent (you can withdraw at any time) |
| Legal compliance | Legal obligation |
7. Cookies & Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze website traffic via analytics tools
- Measure the performance of our marketing
Managing cookies: You can control cookies through your browser settings or our cookie consent banner. Disabling certain cookies may affect the functionality of the Service.
We use the following types of cookies:
- Strictly necessary cookies required for the Service to function
- Analytics cookies that help us understand how visitors use the site (for example Google Analytics)
- Marketing cookies used to show relevant ads on third-party platforms, only with your consent
8. Data Sharing & Third Parties
We share your data only where necessary:
| Recipient | Purpose |
|---|---|
| Payment processors (for example Stripe) | Processing subscriptions and billing |
| Cloud hosting providers (for example AWS, GCP) | Storing data and running the Service |
| Analytics providers (for example Google Analytics) | Understanding usage and improving the product |
| WhatsApp / Meta Business API | Enabling WhatsApp message automation |
| Email/support tools | Sending transactional emails and support responses |
| Legal authorities | When required by law or to protect our rights |
All third-party providers are subject to data processing agreements and are required to handle your data securely and only for the specified purpose.
9. International Data Transfers
ReplyMe is based in Indonesia. If you access the Service from outside Indonesia, your data may be transferred to and processed in Indonesia or other countries where our service providers operate, including the United States.
Where transfers occur to countries without adequate data protection laws, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms.
10. Data Retention
We retain your personal data for as long as necessary to provide the Service and meet our legal obligations:
| Data Type | Retention Period |
|---|---|
| Account data | For the duration of your account, plus 30 days after deletion |
| Billing & transaction records | 7 years (legal/tax requirement) |
| WhatsApp conversation logs | 90 days by default (configurable in your account settings) |
| Support communications | 2 years |
| Analytics data | 26 months (anonymized after 13 months) |
After retention periods expire, data is securely deleted or anonymized.
11. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Access controls and authentication requirements
- Regular security reviews
- Employee data handling training
No system is 100% secure. If you suspect a security issue with your account, contact us immediately at hello@heyreplyme.com.
In the event of a data breach that affects your rights, we will notify you and relevant authorities as required by applicable law.
12. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access to request a copy of the data we hold about you
- Correction to request we fix inaccurate or incomplete data
- Erasure ("right to be forgotten") to request deletion of your data, subject to legal retention requirements
- Restriction to ask us to stop actively processing your data in certain circumstances
- Portability to receive your data in a structured, machine-readable format
- Objection to object to processing based on legitimate interests
- Withdraw consent for any processing based on your consent, such as marketing emails
To exercise any of these rights, contact us at hello@heyreplyme.com. We will respond within 30 days.
If you are unhappy with our response, you have the right to lodge a complaint with your local data protection authority.
13. Children's Privacy
The Service is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last updated" date at the top of this page
- Notify you by email, for material changes, at least 14 days before the change takes effect
Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
15. Contact Us
For any privacy-related questions, requests, or concerns:
- Email: hello@heyreplyme.com
- Address: Jakarta, Indonesia
- Response time: We aim to respond within 5 business days
This Privacy Policy was last reviewed and updated on April 13, 2026.