Privacy Policy

Who handles your data

Replaid is operated by Tokyo Crew OÜ, an Estonian company with registry code 14812210, at Sepapaja tn 6, 15551 Tallinn, Estonia. Contact: hi@replaid.pro.

We act as a data controller for account administration, billing, support, website security, and our own website analytics and optional advertising measurement. When a business uses Replaid to manage its customer conversations, that business normally decides why those conversations are processed. Replaid processes them on the business's instructions to provide the service.

If you contacted a business through a connected channel or a Replaid widget, that business's privacy notice also applies. Contact that business about its use of your messages. We can help route requests concerning data held in Replaid.

Information we process

• Account and team information: names, email addresses, authentication information, team membership, and settings.
• Connected channel information: account or page identifiers, connection credentials, permissions, and connection status.
• Conversation data: message text, available contact identifiers and profile details, timestamps, comments, drafts, tags, assignments, and conversation state.
• Agent activity: authorization details, requested actions, policy decisions, execution results, and webhook delivery information.
• Billing records: credit purchases, balances, usage, payment references, and tax or invoice information. Stripe handles payment details; Replaid receives payment status and related references.
• Earlier beta access requests: your email address, intended use case, selected channels, and agent choice if you submitted the former beta form. Registration is now open and does not require a beta request.
• Support and technical data: the messages you send us, IP addresses, request and error logs, browser information, and security events.

Optional Instagram and Messenger history imports can include available text messages from the last 30 days. The import window is not a promise to delete imported messages after 30 days.

How we use it

We use account information to provide the service and respond to requests about it. This processing supports our contract with account holders, or steps requested before a contract. Where an account belongs to an organization, administering its users also supports our legitimate interest in providing that organization with the service.

If you submitted the former beta form, we use that request to respond about access and setup. New users register directly in the Replaid app.

We process connected conversations to carry out the customer's instructions, provide context to an authorized agent, apply action policies, and record results. The customer is responsible for the lawful basis for its own customer communications.

Security, abuse prevention, troubleshooting, and service reliability support our legitimate interests in operating and protecting Replaid. Billing and accounting records are also processed to meet legal obligations. Optional website analytics, setup measurement, and advertising measurement use consent, as explained in the Cookie Policy.

Your agent and channels

You choose which channels to connect and which agent or application to authorize. When that agent reads a conversation through MCP or the API, relevant data is sent to it. An agent runtime, AI provider, or webhook receiver that you select may store or process that data under its own terms.

Replaid does not supply your agent's business knowledge or reply instructions. Review the privacy, retention, and model-training settings of the agent provider you choose. Replaid's controls do not determine how that provider handles a copy it has already received.

Connected social and messaging platforms process data under their own policies. Replies sent through Replaid are transmitted to the relevant platform. You can revoke agent access and disconnect channels to stop further authorized access; this does not recall messages or remove copies already held by other services.

Service providers and data location

Replaid uses infrastructure and delivery services to host the website and application, store data, deliver messages, and protect the service. Other recipients include:

• Stripe for payments and related fraud prevention. See Stripe's privacy notice.
• Web3Forms to deliver our contact form. Your name, email address, message, and submission metadata pass through that service. Earlier beta requests also passed through Web3Forms; app registration does not. See Web3Forms' privacy notice.
• hCaptcha for contact form spam protection, and previously for the beta form. It can process browser, device, network, and interaction information. See hCaptcha's privacy notice.
• OpenAI advertising measurement, when enabled and after you allow it, receives conversion events and matching signals described in our Cookie Policy. Customer message content is excluded.
• Google Analytics for optional website usage measurement, only after you allow analytics. See Google's privacy notice.
• Your selected platforms and agent providers when you connect or authorize them.

Data may be processed outside the European Economic Area, depending on the provider and the connections you choose. Transfers subject to European data protection law require an applicable transfer mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the recipients and transfer arrangements relevant to your use of Replaid.

We may also disclose information when required by law or when needed to establish, exercise, or defend legal claims.

Retention and deletion

Account and conversation data is kept while needed to provide the service and carry out the customer's instructions. Retention depends on the active account, requested deletion, operational needs, and legal obligations. Logs and execution records support troubleshooting, security, and investigation of action outcomes. Billing records may need to be retained after an account closes.

Disconnecting a channel does not by itself delete stored conversations. Clearing a browser's widget storage does not delete the conversation held by the business. Contact us or the business responsible for the conversation to request deletion.

Account deletion is available in profile settings. Outstanding credit balances, pending payments, reservations, disputes, or enabled auto-refill may need to be resolved first. You can still contact us to exercise your data rights. Deletion from active systems does not necessarily remove copies from backups immediately or data that must be retained by law.

Your choices and rights

Depending on the applicable law, you can request access, correction, deletion, restriction, or a portable copy of your personal data. You can object to processing based on legitimate interests and withdraw consent for optional processing. Withdrawal does not change the lawfulness of processing carried out before it.

Send requests to hi@replaid.pro. We may need information to verify your identity and locate the relevant records. Under the GDPR, requests are normally answered within one month; permitted extensions will be explained. For data processed on a business customer's instructions, we will assist that business with the request.

You can complain to a relevant data protection authority, including Estonia's Andmekaitse Inspektsioon. The European Data Protection Board explains these rights.

You can change analytics and advertising preferences on the Cookie Policy page. Replaid is not intended for children under 13. Contact us if you believe information about a child has been provided inappropriately.

Changes to this notice

This page may change as the service and its providers change. The date above identifies the current version. Where required, we will provide additional notice of a material change.