Legal

Data processing

Draft — last updated 19 October 2026.

This page is a draft. It describes what Replio actually does today, but it is not legal advice. Have a qualified professional review it before you publish it.

This page describes how Replio processes customer conversation data on behalf of the business using it. Your business is the controller of that data; Replio acts as a processor.

Categories of data

Business details you enter (services, hours, prices, FAQs). Customer messages, names and phone numbers. Booking and lead details captured by the assistant. Webhook delivery events from messaging providers.

Purposes

To generate replies to your customers, to show you your conversations and analytics, to build summaries, and to operate and secure the service.

Sub-processors

Hosting and database: the platform provider that runs Replio and stores your data.

AI provider: the model that generates replies from your business knowledge.

Messaging provider: Meta, when you connect WhatsApp.

Sub-processor list — your input needed

The named providers and their locations will be confirmed here once the full list is finalised.

Security measures

Each business's data is isolated on the server. Sensitive credentials are stored server-side only. Administrative actions require an admin role. Access is enforced on the server, not only in the page.

Retention and deletion

You set how long conversations and messages are kept, and can clear your data from Settings. You can disconnect a messaging number to remove its stored credentials.

Your controls

You can view, update and delete records within your workspace, and export your data before cancellation.