ReplyMagic privacy policy and data rights.
The short version: we collect what we need to run the product, we do not sell your data, and we give you real controls over it.
This Privacy Policy explains how ReplyMagic (operated by ZipLyne, 30 N Gould St Ste N, Sheridan, WY 82801, United States) collects, uses, and protects information when you use our website, app, and services. It is written to be readable. If anything is unclear, write us at admin@replymagic.ai.
1. Data we collect
- Account data — name, email, password hash, timezone, billing country.
- Instagram data via the official Meta Graph API — connected business account, comments and DMs received on posts you choose to enable, public post metadata (caption, media URL), and replies sent on your behalf.
- Context you provide — product descriptions, prices, sizes, offers, voice samples, FAQs, and topics you mark as "always refer to me".
- Billing data — handled by Stripe. We store the customer ID, plan, and last-4 of the card. We never see full card numbers.
- Usage and diagnostic data — pages visited, feature interactions, error reports, IP address, browser type. Used to operate and improve the service.
2. How we use it
- To run the service — generate replies, deliver them through Meta, show analytics.
- To authenticate you and protect your account.
- To bill you and enforce plan limits.
- To improve the product through aggregated, de-identified usage analysis.
- To send transactional email (receipts, security alerts, important changes).
- To send product email if you opt in. You can opt out from any email.
3. Legal bases (GDPR)
We process personal data under the following bases: contract (to provide the service you signed up for), legitimate interests (to secure and improve the service), consent (for optional analytics and marketing email), and legal obligation (tax and accounting records).
4. Third-party processors
We share data with the minimum number of vendors needed to run the product. Each is bound by a data processing agreement. The current list lives in our Data Processing Addendum; today it is:
- Meta Platforms — Instagram Graph API for receiving comments/DMs and sending replies.
- Supabase — managed Postgres database and authentication.
- Cloudflare — API hosting and request routing.
- Stripe — payment processing.
- Commercial AI providers — reply generation, configured so your content is not used to train their foundation models.
- Microsoft Clarity — anonymized session analytics on our marketing site.
5. Retention
Account and context data is retained while your account is active. After deletion, we remove personal data within 30 days, except for records we are legally required to keep (typically billing records, retained as required by U.S. federal and state tax law). Reply logs are retained for a limited period for support and abuse-prevention purposes, then truncated.
6. Your rights
If you are in the EEA, UK, or Switzerland, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with a supervisory authority. If you are in California, you have rights under the CCPA/CPRA including access, deletion, correction, and the right to opt out of "sharing" — we do not sell or share personal information for cross-context behavioral advertising.
To exercise any right, email admin@replymagic.ai from the address on your account. We respond within 30 days.
7. International transfers
Some processors are based outside the EEA. Where required, transfers are covered by Standard Contractual Clauses (SCCs) and additional safeguards. See our Data Processing Addendum for details.
8. Security
We use encryption in transit and at rest, principle-of-least-privilege access controls, and continuous monitoring. See /security for an overview.
9. Children
ReplyMagic is not intended for anyone under 16. We do not knowingly collect data from children.
10. Changes
We may update this policy. Material changes will be announced by email and on this page at least 14 days before they take effect.
11. Contact
ZipLyne, 30 N Gould St Ste N, Sheridan, WY 82801, United States — admin@replymagic.ai. For data processing matters, see our DPA.