Privacy Policy

Last updated January 1, 1970.

This policy explains how RPLY handles information when a business uses RPLY to reply to missed calls and message its own customers.

Who we are

RPLY is a service sold to businesses. A business signs up, connects a phone number and uses the service to reply to people who call it. Those callers are the business's customers — they do not create accounts with us and generally interact only with the business.

Information we collect

Business account information:

  • Name, email address and password credentials of the person creating the account
  • Business name, industry, address, service area, opening hours and description
  • Team member accounts and their roles
  • Business phone numbers and messaging configuration

Customer and conversation information a business processes through the service:

  • Customer names, phone numbers, email addresses and addresses
  • SMS and MMS message content sent and received through the service
  • Call metadata such as time, duration and whether a call was answered
  • Conversation history, notes and tags
  • Appointment and booking details
  • Quote, estimate and order details
  • Photos or files a customer or business uploads to a conversation

Technical and commercial information:

  • IP address, device type, browser and operating system
  • Product usage and diagnostics such as pages viewed, features used and errors
  • Subscription plan, billing status and payment records held by our payment provider
  • Cookies and similar session technologies described in our Cookie Policy

How we use information

  • To operate the service the business asked for: replying to missed calls, holding conversations, booking work and producing quotes and orders
  • To authenticate users and keep accounts secure
  • To provide support and respond to requests
  • To bill subscriptions and measure included usage
  • To improve reliability, detect abuse and prevent fraud
  • To send service notices about the account

Automated and AI-assisted processing

Message drafting and conversation understanding may be produced automatically. Automated output can be wrong or incomplete, and businesses can review, approve or take over any conversation. We do not use a business's customer content to train public, general-purpose models.

Roles and responsibility

Each business decides what customer information to put into the service and how to use it. The business is responsible for having the rights and consents needed to contact its customers and to store their information here. We process that information on the business's behalf to run the service.

Third parties that process data for us

  • Telephony and SMS providers, to deliver and receive messages
  • Cloud hosting and database providers, to store and serve the application
  • Payment providers, to process subscriptions (we do not store full card numbers)
  • Calendar providers, where a business chooses to connect one
  • Product analytics and error monitoring, to keep the service working

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Retention

Account and conversation data is kept while the business account is active. When an account is deleted, we remove business and customer records within 30 days, except for records we must keep for billing, tax, security or fraud-prevention reasons, which are kept only as long as required and then deleted.

Security

We use industry-standard security practices appropriate to the services we provide, including encrypted connections, tenant separation, role-based access and server-side authorisation checks. No service can promise perfect security. See our Security page for details of what is actually implemented.

Your rights and data deletion

Depending on where you live, you may have the right to access, correct, export or delete your information, or to object to certain processing. Business owners can delete their account from Settings → Account inside the app. Customers of a business should contact that business directly; we will forward and support deletion requests we receive.

Privacy requests: support@justrply.com

Children

The service is for business use and is not directed to children. We do not knowingly collect information from anyone under 16. If you believe a child's information has been provided to us, contact us and we will remove it.

International users

Information may be stored and processed in the country where our infrastructure providers operate, which may be different from where you live. Where required, we rely on appropriate safeguards for those transfers.

U.S. state privacy disclosures

Residents of certain U.S. states may request access to, correction of, or deletion of personal information, and may appeal a decision. We do not sell personal information or share it for targeted advertising, and we do not discriminate against anyone who exercises these rights.

Changes to this policy

We will update this page when our practices change and revise the "last updated" date above. Material changes will also be sent to account owners by email.

Contact