Privacy Policy

1. Who we are

Repilay is a shared inbox for the comments and messages a business receives on its social accounts. The service is operated by "VUSHIN" Məhdud Məsuliyyətli Cəmiyyəti (VUSHIN LLC), a company registered in Azerbaijan. VUSHIN LLC decides how the data described here is used, which in some countries is called being the data controller.

You can reach us at [email protected] with any question about this document or about the data we hold.

2. Information we collect

When you use Repilay we collect:

• Account information: your name, email address, password and billing details.
• Connected accounts: the access tokens and account identifiers we need to read and reply on the social accounts you connect.
• Content you give us: the documents, website text and brand details you upload so the assistant can answer in your voice.
• Usage data: records of how the product is used, kept for security and troubleshooting.

3. Data we receive from Meta

When a business connects its Facebook Page or Instagram professional account, Meta shares data with us so that business can read and answer its own customers. We receive:

• Page and account details: the name, identifier, profile picture and access token of the connected page or account.
• Content published by that account: posts, captions, images and the time they were published.
• Customer comments and messages: what a customer wrote to the connected account and when.
• Customer profile fields: the name, username, profile picture and page scoped identifier of the person who wrote, so the business can see who it is answering.

We use this data only to run the inbox for the business that connected the account. We do not use it for advertising, we do not build profiles of the people who write in, and we do not use it to train any model.

4. How we use your information

We use the data we collect to:

• run the inbox, deliver incoming comments and messages, and send the replies you approve.
• draft suggested replies in your brand voice using large language models.
• keep the service secure, prevent abuse and enforce our terms.
• bill you and answer your support requests.

5. Data sharing and subprocessors

We do not sell, rent or trade personal data. We share it only with the providers we need in order to run the service, and only for that purpose:

• OpenAI, United States: the text of comments and messages, together with your brand content, is sent to their models to draft replies and to build search embeddings. It is not used to train their models.
• Contabo GmbH, Germany: hosting for our servers and databases.
• Zoho Corporation, United States: delivery of transactional email through ZeptoMail, such as sign in and notification messages.

Each provider acts on our instructions under a written agreement and may not use the data for its own purposes. We may also disclose data where the law requires it, after checking that the request is lawful and giving only what it actually covers.

6. International transfers

We are based in Azerbaijan and the providers above are in Germany and the United States, so data is transferred outside the country it was collected in. Where the law requires a safeguard for that transfer, it is covered by the standard contractual clauses in our agreements with those providers.

7. How long we keep data

We keep your data for as long as your workspace exists. Disconnecting a social account deletes its stored access token immediately, and you can choose to erase everything that account produced at the same time. Deleting a workspace deletes its channels, conversations, comments and uploaded files.

Deleted data can remain in encrypted backups for a short time until those backups are rotated out. We keep only what the law obliges us to keep after that, such as invoices.

8. Data security

We encrypt data in transit and at rest, and the access tokens for your connected accounts are encrypted with a separate key before they are stored. Access to production systems is limited to the people who need it to run the service.

9. Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can delete a workspace and everything in it yourself from Settings. Step by step instructions, including how to remove Repilay's access from Meta, are at repilay.com/data-deletion.

For any other request write to [email protected] from the address on your account. We answer within 30 days.

10. Contact us

Questions about this policy go to [email protected]. The company responsible is "VUSHIN" Məhdud Məsuliyyətli Cəmiyyəti (VUSHIN LLC), registered in Azerbaijan.