Privacy Policy

1. Introduction

Replyva ("we," "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Replyva Platform ("Service").

"Service" has the same meaning as in our Vendor Terms of Service, including all current and future Replyva websites, apps, APIs, portals, and related products.

This Policy applies to vendor account holders and their authorized users. Your clients interact with client portals and forms you control; you are responsible for providing them appropriate privacy notices for their relationship with you.

Effective date: June 21, 2026.

2. Information We Collect

Account & profile: name, business name, email, phone, website, timezone, billing details, plan selections, and authentication identifiers from our identity provider.

Vendor Content: client records, contracts, proposals, galleries, messages, files, and other data you upload or generate in the Service.

Usage & device: log data, IP address, browser type, pages viewed, feature usage, crash reports, and security signals.

Payment: subscription billing is processed by third parties (e.g., Stripe, Square). We receive transaction metadata, not full card numbers stored by us.

Communications: support tickets, feedback, and email correspondence.

3. How We Use Information

We use information to provide, maintain, and improve the Service; authenticate users; process subscriptions; send transactional messages; detect fraud and abuse; comply with law; and analyze aggregated usage.

We may use de-identified or aggregated data for analytics, benchmarking, and product development.

We do not sell your personal information. We do not use Vendor Content to train public third-party AI models except as disclosed in-product when you enable AI features.

4. New Products & Features

When we launch new Replyva apps, modules, or integrations, we may collect additional categories of information disclosed in-product. This Policy applies to those products unless a separate privacy notice expressly supersedes it.

Beta and experimental features may log additional diagnostic data. Beta, preview, experimental, and early-access features are provided AS IS, may change or be withdrawn without notice, and are excluded from any SLA or uptime commitment.

5. How We Share Information

We share information with service providers who assist us under contractual confidentiality and security obligations, including:

• Authentication (e.g., Clerk)
• Cloud hosting and storage (e.g., Vercel, object storage providers)
• Database infrastructure (e.g., Neon Postgres)
• Email delivery (e.g., Resend)
• Payment processing (e.g., Stripe, Square, PayPal)
• Error monitoring and security tools
• AI inference providers when you use AI features

6. Client Data & Your Responsibilities

When you store client personal information in the Service, you determine the purposes and means of processing. Replyva processes that data on your behalf to provide the Service.

You must obtain lawful bases and consents, honor data-subject requests for client data you control, and maintain your own privacy policy for your business.

Portal links, public forms, and share URLs you generate may expose data to anyone with the link if you configure them that way. You are responsible for link distribution and access controls.

7. Data Retention & Deletion

We retain information while your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements.

Upon account closure, we may delete or anonymize data within a reasonable period. Residual copies may persist in backups for a limited time before rotation.

YOU ARE RESPONSIBLE FOR EXPORTING DATA YOU WISH TO KEEP BEFORE CLOSING YOUR ACCOUNT. WE ARE NOT LIABLE FOR DATA LOST AFTER TERMINATION OR DUE TO BACKUP EXPIRATION.

8. Security

We implement administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and optional field-level encryption for certain sensitive data.

NO METHOD OF TRANSMISSION OR STORAGE IS 100% SECURE. WE CANNOT GUARANTEE ABSOLUTE SECURITY OR PREVENT UNAUTHORIZED ACCESS, LOSS, OR ALTERATION.

9. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or port personal information, or to object to or restrict certain processing.

Contact privacy@replyva.com to exercise rights. We may verify your identity before responding. If we process client data on your behalf, direct client requests to you as the controller.

You may update account information in dashboard settings. Marketing emails include unsubscribe options where applicable.

10. International Transfers

We operate in the United States. If you access the Service from other regions, your information may be transferred to and processed in the U.S. and other countries with different data-protection laws.

Where required, we use appropriate safeguards for cross-border transfers.

11. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. Contact us if you believe we have collected such information.

12. Changes

We may update this Policy. We will post the revised version with a new effective date and provide additional notice for material changes when appropriate.

13. Contact

Privacy inquiries: privacy@replyva.com

Legal inquiries: legal@replyva.com