Privacy Policy

ReplyBiz is an app that lets restaurants read and reply to customer messages from WhatsApp, Instagram and Facebook Messenger, and to Google reviews, in one place. This policy explains what information we handle, why, who we share it with, and the choices you have.

It covers two groups of people:

• Restaurants that use the app, and the admins who sign in on their behalf.
• Customers who message a restaurant or review it on a channel the restaurant has connected to ReplyBiz.

For customer messages and reviews, the restaurant decides what to connect and how to use the conversations; we process that information on the restaurant's behalf to provide the service. For restaurant account information, we decide how it is used.

1. Information we collect

We do not collect payment card details. We do not access a restaurant's personal Facebook or Google data beyond the permissions it grants for the connected business accounts.

2. How we use information

• To show the restaurant its conversations and reviews, and to send its replies through the right channel.
• To send the restaurant's admin alerts about new messages and reviews.
• To sign admins in with a one-time code sent by email, and to keep accounts secure.
• To keep channel connections working, detect expired access and troubleshoot problems.
• To provide support when a restaurant asks for help.
• To meet legal obligations and enforce our terms.

We do not sell personal information, use customer messages for advertising, or build advertising profiles. We do not send messages to customers except replies the restaurant chooses to send.

The current version of ReplyBiz does not use artificial intelligence to read or reply to messages. If we add such features, we will update this policy before they are switched on, and restaurants will control whether they are used.

3. Information from Meta and Google

We access WhatsApp, Instagram and Messenger data only through Meta's official APIs, with the permissions the restaurant grants, and in line with Meta's Platform Terms and Developer Policies. The restaurant can remove our access at any time from the app or from its Meta business settings.

ReplyBiz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Business Profile data only to show reviews to the restaurant and post the replies it writes.

4. Who we share information with

We share information only as needed to run the service:

• Meta Platforms (WhatsApp, Instagram, Messenger), to receive and send messages.
• Google, to read reviews and post replies through Google Business Profile.
• Service providers that host and operate the service for us under contract: cloud hosting and database (Supabase), push notifications (Google Firebase Cloud Messaging and Expo), and email delivery for sign-in codes (a transactional email provider).
• Authorities, when the law requires it, or to protect the rights and safety of people or our service.
• A buyer or successor, if our business is sold or merged, under the same protections.

Our providers may store and process data on servers outside India. Where they do, we require them to protect it to the standard described here.

5. How long we keep information

• Conversations, media and reviews are kept while the restaurant's account and channel are active, so the restaurant can see its history.
• When a restaurant disconnects a channel or closes its account, we delete the related messages, media, customer details and access tokens within 30 days, unless the law requires us to keep something longer.
• Backups are overwritten within a further 30 days.
• Restaurant account details are deleted within 30 days of the account being closed.

6. How we protect information

• Data is encrypted in transit, and channel access tokens are encrypted at rest.
• Each restaurant can access only its own data; this is enforced in our database, not only in the app.
• Messages from Meta are checked for a valid signature before we accept them.
• Access by our team is limited to what is needed to provide support and keep the service running.

No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authorities as the law requires.

7. Your choices and rights

Restaurants and admins

• See and edit your business name and settings in the app.
• Disconnect any channel from the Channels tab, or remove our access from your Meta or Google account settings.
• Ask us for a copy of your data, to correct it, or to delete your account and its data, by emailing szzs.vsn@gmail.com.

Customers who message a restaurant

Your conversation belongs to the restaurant you messaged. To access, correct or delete your messages, contact that restaurant first. You can also email us at szzs.vsn@gmail.com with the restaurant's name and the phone number or account you used, and we will help, or pass your request to the restaurant.

Under India's Digital Personal Data Protection Act, 2023, you may have rights to access, correct, complete or erase your personal data, to withdraw consent where we rely on it, to nominate another person to exercise your rights, and to raise a grievance. See our data deletion instructions.

8. Children

ReplyBiz is a business tool and is not meant for anyone under 18. Restaurant admins must be adults. We do not knowingly collect data about children; if you believe we have, contact us and we will delete it.

9. Changes to this policy

We will post any change on this page and update the date at the top. If a change is significant, we will tell restaurant admins in the app or by email before it takes effect.

10. Contact and grievances