Privacy Policy
Last updated: March 2026
ReplyMate ("we", "our", "us") operates replymate.my. This policy explains how we collect, use and protect your information when you use our WhatsApp AI platform.
1. Information We Collect
We collect information you provide directly:
- Account data: Name, email address, business name and type when you sign up
- Business data: FAQs, pricing, business hours, and knowledge base content you add
- WhatsApp data: Message content sent to your business number via our AI, customer phone numbers, and conversation history
- Payment data: Transaction reference and amount (we do not store card numbers)
2. How We Use Your Information
- To provide and operate the ReplyMate AI service
- To train your AI assistant to answer customer questions accurately
- To send you daily briefings, weekly reports, and appointment reminders
- To process billing and manage your subscription
- To improve our service and fix issues
3. Data Storage & Security
Your data is stored on Supabase (hosted in Asia-Pacific region). We use Row Level Security (RLS) to ensure each business can only access their own data. All data is encrypted in transit (HTTPS/TLS) and at rest.
WhatsApp message data: Customer messages processed through our AI are stored for 90 days to enable conversation history and analytics. You can request deletion at any time by emailing privacy@replymate.my.
4. Data Sharing
We do not sell your data. We share data only with:
- AI model provider: Message content is sent to process AI replies. Our AI provider does not use this data to train their models.
- Supabase: Database and authentication provider
- Stripe (when applicable): Payment processing
- Google (when connected): Calendar data for appointment booking
We may disclose data if required by Malaysian law or valid legal process.
5. Your Customer's Data
When your customers message your WhatsApp number, their messages are processed by our AI. You are responsible for informing your customers that an AI assistant may respond on your behalf. You must not use ReplyMate to collect sensitive personal data (IC numbers, financial details, medical records) via WhatsApp.
6. Data Retention
- Account data: Retained while your account is active
- Message logs: 90 days rolling window
- Analytics: 12 months
- Billing records: 7 years (as required by Malaysian law)
7. Your Rights
You have the right to access, correct, or delete your data. Email privacy@replymate.my and we will respond within 14 business days.
8. Cookies
Our website uses only essential cookies for authentication (Supabase session token). We do not use advertising or tracking cookies.
9. Contact
Questions about this policy: privacy@replymate.my
ReplyMate · Malaysia · replymate.my