Privacy Policy
Last updated: 2026-10-16
What we collect
Account data: your email address, business name, and a Stripe customer reference.
Website content: the public pages we read from the website you give us, or the documents you upload. This may include staff names and contact details that are already published on your own site.
Conversations: the questions your website visitors type into the assistant and the answers it gave, kept so the business running the assistant can read them in their dashboard. On Growth and above, when a visitor types contact details such as an email or phone number, those fields are listed separately so the business can export them as a spreadsheet.
Usage counts: how many messages each website has handled, so we can apply plan limits.
Messages you send us: if you write through the form on this website, we keep your name, email address, and message so we can reply.
What we do not collect
We do not build profiles of your visitors. Conversations are stored against the website they happened on, not against a person: no name, no account, no advertising identifier, and no tracking across visits or across other websites.
Card details never touch our servers. Payments are handled entirely by Stripe’s hosted checkout.
Who we share it with
To provide the service we send data to: a crawling provider (your website address), an embeddings provider and a language-model provider (your website content and visitor messages), Stripe (billing), an email provider (verification and balance reminders), and our hosting and database providers. We do not sell personal data, and we do not use it to train models.
Cookies on replaia.com
On this website we use PostHog to measure product events (for example whether someone copied the embed snippet), and — when configured — Google Analytics 4 to see which public pages are visited and how people arrive from search. They set cookies or a similar identifier in your browser. We do not use them to show ads. You can refuse them by blocking cookies or using a tracker blocker. This does not apply to the chat widget on a customer’s own website; that path is described under “For website visitors”.
Lawful basis
We process account data to perform our contract with you, website content and stored conversations on the basis of our legitimate interest in operating the service you asked for — a business cannot tell whether its own assistant is answering correctly without reading what it said — and usage counts to enforce the plan you agreed to.
How long we keep it
Website content, stored conversations, and the data derived from them are kept while your account is active. Deleting a website deletes its conversations with it. Usage counts are kept for the current and preceding month. Messages you send through the form on this website are kept so we can reply. Billing records (including the Stripe customer record) are kept for as long as tax law requires. Encrypted database backups and error or analytics telemetry follow those providers’ own retention. When you delete a website or your account, scoped records are removed at once and stored files (avatars, logos, thumbnails) are removed within 24 hours. We do not promise that every copy on a backup tape or a third-party log disappears in that window.
Your rights
You may access, correct, export, or delete your data. Deletion is self-serve from your account page and takes effect at once. For anything else, write to privacy@replaia.com and we will respond within 30 days. In the EU or UK you may complain to your local supervisory authority; in Australia, to the OAIC; in California, to the Attorney General.
For website visitors
If you are chatting with an assistant on a business’s website: your message is sent to a language-model provider to generate a reply, and both your message and the reply are saved so that the business can read the conversation later — as they could with an email or a contact form. We do not build a profile of you and do not track you across websites. Please do not type card numbers, ID numbers, or passwords into the chat.