Privacy Policy

1. What data we collect

We collect account data: your name, email, and password hash. Your password is never stored in plain text on our servers and is never shared with anyone, including our own team.

Separately, we collect the data your AI agents need to work: the knowledge base you upload (documents, answers to frequent questions, a catalog of products or services, agent instructions), and conversations with your customers — the messages your agent exchanges in connected channels: Telegram and the chat on your website (Instagram and WhatsApp will follow once Meta approves access).

We also collect technical data: request logs, IP address, device and browser information, cookies. This data is the basis for keeping the service running, finding and fixing bugs, and protecting accounts from unauthorized access.

2. Why we collect data

Account data is needed to log in, run billing, and reach you about important matters — for example, a tariff change. Knowledge base and conversation data is what makes the agent work: without it the agent can't give substantive answers to your customers, and without conversation history you can't hand off a complex case to a human operator.

Subscription payments go through Click and Payme, so we share part of the transaction data — amount, payment status, order ID — with them to process the payment.

We also use anonymized usage statistics: how many conversations the agent handles, which questions it answers confidently, and which it doesn't. This helps us improve answer quality and find gaps in the knowledge base before your customers notice them.

3. Where data is stored

Data is stored on our servers in Finland (European Union). We chose this location for speed: the database sits next to the application, so the agent answers faster.

The Law of the Republic of Uzbekistan "On Personal Data" (ZRU-547), as amended on 26 March 2026, requires storage inside Uzbekistan only for biometric and genetic data and for data of telecom operators' subscribers. We collect none of those categories, so we may store data abroad. The hosting country provides a level of protection no lower than required: the General Data Protection Regulation (GDPR) applies across the European Union.

For the Enterprise tier, hosting on servers in Uzbekistan is available by separate agreement.

4. Who we share data with

For the agent to answer, the customer's message text and matching fragments of your knowledge base are sent to an AI model provider — Google and OpenAI via the Vercel AI Gateway. Only conversation text is sent: never your logins, passwords or payment details. We share data with payment providers — Click and Payme — to the extent needed to process payment and confirm a transaction. If you connect your agent to messenger platforms, part of the conversation data passes through those platforms' APIs: that's what actually lets a message reach the customer and come back.

We do not sell your data to third parties and do not share it for marketing or other purposes unrelated to the service. Inside our team, access to data is limited to staff who need it for support or development, and only to the extent required.

5. Cookies

We use cookies for two purposes: to keep you logged in across sessions without asking for your password on every page, and to remember your locale settings — the interface language you chose on your first visit. We do not use cookies for ad tracking and do not share them with third-party ad networks.

6. How long we keep data

Account data, your knowledge base and conversations are kept while your account exists. Once it is deleted, they are removed from production systems immediately.

Database backups are kept for no longer than six months and are deleted as that period expires — we will not restore a deleted account from a backup.

Technical logs (request records, IP addresses) are capped in size and overwritten by newer entries as they arrive, so they are kept only briefly.

Payment records — amount, date and payment number — must be retained for the periods set by the accounting laws of the Republic of Uzbekistan. They contain none of your conversations or knowledge base.

7. Your rights

You can, at any time, obtain a copy of your data, correct inaccuracies in your profile and delete your account together with all associated data. All of it is available in the app: export conversations as a file on the "CRM" page, delete individual documents in "Knowledge", delete your account in "Settings". Full instructions are on the data deletion page.

Account deletion is irreversible: connected Telegram channels are disconnected, access tokens are erased, and data is removed from production systems. Backups that may have contained it are overwritten during the normal rotation cycle.

If you believe we process your data unlawfully, you may contact the State Personalization Centre under the Cabinet of Ministers of the Republic of Uzbekistan — the competent authority for personal data.

8. Contact

For questions about this policy or how we process your data, message us on Telegram — @replyra_bot. We prioritize responses to these requests.