Privacy Policy

1. Introduction

Replai (operated by Junkies Coder) respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI-powered WhatsApp CRM platform ("Service").

By using Replai, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

• Full name and email address provided during registration
• Password (stored using industry-standard hashing — never in plaintext)
• Profile avatar (optional)
• Organization/workspace name

2.2 WhatsApp Business API Data

When you connect your WhatsApp Business account, we process:

• Messages sent and received through the platform
• Contact information (phone numbers, names) imported or synced
• Media files shared within conversations (images, documents, audio)
• Message templates created and submitted for approval
• Delivery and read receipts

2.3 Usage and Analytics Data

• Browser type, operating system, and device information
• IP address and approximate location
• Pages visited and features used within the platform
• Session duration and interaction patterns

2.4 Cookies and Tracking Technologies

We use essential cookies for authentication and session management. Please see our Cookie Policy for full details.

3. How We Use Your Data

We use the collected data for the following purposes:

• Service Delivery — To provide, operate, and maintain the Replai platform
• WhatsApp Messaging — To send and receive messages on your behalf via the WhatsApp Business API
• AI Features — To power AI-assisted replies, chatbots, and automation workflows
• Account Management — To manage your workspace, team members, and permissions
• Customer Support — To respond to inquiries, troubleshoot issues, and provide assistance
• Platform Improvement — To analyze usage patterns and improve features
• Security — To detect, prevent, and address fraud, abuse, and technical issues
• Legal Compliance — To comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with:

• Meta Platforms, Inc. — As required to operate the WhatsApp Business API. Meta acts as a data processor for message delivery. Meta's own Privacy Policy governs their processing.
• Supabase — Our database and authentication infrastructure provider
• Hosting Providers — Cloud infrastructure services (e.g., Vercel) for platform hosting
• AI Service Providers — For AI-powered features (data is processed in accordance with their data processing agreements)
• Legal Authorities — When required by law, court order, or government regulation

6. Data Retention

You may request earlier deletion by contacting us at privacy@junkiescoder.com.

7. Data Security

We implement industry-standard security measures including:

• End-to-end encryption for WhatsApp messages (provided by Meta)
• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls and team permissions
• Row-level security (RLS) at the database level
• Regular security audits and vulnerability assessments
• Secure password hashing using bcrypt

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate or incomplete data
• Deletion — Request deletion of your personal data ("right to be forgotten")
• Portability — Receive your data in a portable format
• Restriction — Restrict processing of your data
• Objection — Object to processing based on legitimate interests
• Withdraw Consent — Withdraw consent at any time without affecting prior processing

To exercise any of these rights, email us at privacy@junkiescoder.com. We will respond within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Children's Privacy

Replai is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through the platform. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Google Workspace & Google Sheets Add-on Integration

When you install and authorize the Replai for Google Sheets add-on from the Google Workspace Marketplace:

1. Google API Compliance & Limited Use: Replai's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
2. Narrow Scope: The add-on requests only https://www.googleapis.com/auth/spreadsheets.currentonly. It can only read the specific spreadsheet you actively open it in and has zero access to your Google Drive, emails, contacts, or other documents.
3. No AI Model Training: We do not use Google Workspace data or your spreadsheet rows to train generalized AI or machine learning models.
4. No Sale of Data: We never sell, rent, or trade your spreadsheet content or customer contact data to third parties or data brokers.
5. Dedicated Add-on Privacy Policy: For complete details regarding data processing, OAuth consent, and security practices specific to the Google Sheets integration, review our dedicated Google Sheets Add-on Privacy Policy.

13. AI Connectors (Claude and ChatGPT)

When you, or a member of your workspace, connect an AI application such as Claude (Anthropic) or ChatGPT (OpenAI) to Replai:

1. What the AI application receives: only the data its requests return while you use it, within the permissions you approved when connecting. Depending on those permissions, this can include contact details (name, phone number, email, company, tags, notes and custom fields), inbox conversations and message text, deals and pipelines, message templates, broadcast and automation results, dashboard figures, and your own name, email address and workspace name.
2. Who processes it: the AI provider you chose (Anthropic or OpenAI) processes that data under its own terms and privacy policy. You choose to send data to that provider; it is not a sub-processor of Replai. Replai does not receive the content of your conversation with the AI application.
3. What Replai stores: the connection (which application, which permissions and settings, when it was last used); access tokens in hashed form only; and an activity log of each action (what was done, the outcome, record identifiers and counts — not message text), kept for 90 days. Previews waiting for your confirmation are deleted within about a day. Messages sent through an AI application are stored like any other message and marked as sent through that application.
4. Your controls: you choose the permissions when connecting and can narrow them or disconnect at any time in Settings → AI Connectors. Disconnecting revokes access immediately. Unused connections are disconnected automatically (after 30 days by default). The workspace owner can switch AI connectors off for the whole workspace and can disconnect any connection in it.
5. Restricted data: the AI connector never asks for or returns payment card data, health data, government identifiers, passwords or API keys. Your WhatsApp credentials and Replai API keys are not available to it.
6. No model training: Replai does not use data accessed through the AI connector to train AI models.
7. More information: see Replai for Claude and ChatGPT.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@junkiescoder.com
• Company: Junkies Coder
• Website: https://junkiescoder.com