1. Introduction
Replai (operated by Junkies Coder) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI-powered WhatsApp CRM platform ("Service").
By using Replai, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Account Information
- Full name and email address provided during registration
- Password (stored using industry-standard hashing — never in plaintext)
- Profile avatar (optional)
- Organization/workspace name
2.2 WhatsApp Business API Data
When you connect your WhatsApp Business account, we process:
- Messages sent and received through the platform
- Contact information (phone numbers, names) imported or synced
- Media files shared within conversations (images, documents, audio)
- Message templates created and submitted for approval
- Delivery and read receipts
2.3 Usage and Analytics Data
- Browser type, operating system, and device information
- IP address and approximate location
- Pages visited and features used within the platform
- Session duration and interaction patterns
2.4 Cookies and Tracking Technologies
We use essential cookies for authentication and session management. Please see our Cookie Policy for full details.
3. How We Use Your Data
We use the collected data for the following purposes:
- Service Delivery — To provide, operate, and maintain the Replai platform
- WhatsApp Messaging — To send and receive messages on your behalf via the WhatsApp Business API
- AI Features — To power AI-assisted replies, chatbots, and automation workflows
- Account Management — To manage your workspace, team members, and permissions
- Customer Support — To respond to inquiries, troubleshoot issues, and provide assistance
- Platform Improvement — To analyze usage patterns and improve features
- Security — To detect, prevent, and address fraud, abuse, and technical issues
- Legal Compliance — To comply with applicable laws, regulations, and legal processes
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:
| Legal Basis | Purpose |
|---|---|
| Contractual necessity | To provide the Service you signed up for |
| Legitimate interest | Platform security, fraud prevention, and analytics |
| Consent | Marketing communications and optional AI features |
| Legal obligation | Compliance with tax, accounting, and regulatory requirements |
5. Data Sharing and Third Parties
We do not sell your personal data. We share data only with:
- Meta Platforms, Inc. — As required to operate the WhatsApp Business API. Meta acts as a data processor for message delivery. Meta's own Privacy Policy governs their processing.
- Supabase — Our database and authentication infrastructure provider
- Hosting Providers — Cloud infrastructure services (e.g., Vercel) for platform hosting
- AI Service Providers — For AI-powered features (data is processed in accordance with their data processing agreements)
- Legal Authorities — When required by law, court order, or government regulation
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Duration of your account + 30 days after deletion |
| WhatsApp messages | As configured by your workspace (default: 12 months) |
| Contact data | Duration of your account |
| Usage analytics | 24 months (anonymized after 6 months) |
| Audit logs | 12 months |
You may request earlier deletion by contacting us at privacy@junkiescoder.com.
7. Data Security
We implement industry-standard security measures including:
- End-to-end encryption for WhatsApp messages (provided by Meta)
- TLS/SSL encryption for all data in transit
- AES-256 encryption for data at rest
- Role-based access controls and team permissions
- Row-level security (RLS) at the database level
- Regular security audits and vulnerability assessments
- Secure password hashing using bcrypt
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — Request a copy of your personal data
- Rectification — Correct inaccurate or incomplete data
- Deletion — Request deletion of your personal data ("right to be forgotten")
- Portability — Receive your data in a portable format
- Restriction — Restrict processing of your data
- Objection — Object to processing based on legitimate interests
- Withdraw Consent — Withdraw consent at any time without affecting prior processing
To exercise any of these rights, email us at privacy@junkiescoder.com. We will respond within 30 days.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
10. Children's Privacy
Replai is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through the platform. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@junkiescoder.com
- Company: Junkies Coder
- Website: https://junkiescoder.com