Effective date: November 1, 2026
Privacy Policy
This Privacy Policy explains how JDigital LTDA, Av. Eng. Luiz Carlos Berrini, 1748, Suite 506, Sao Paulo, SP 04571-000, Brazil ("Reploy IA", "we", "us") collects, uses and shares personal information through the Reploy IA website and platform (the "Service").
For privacy requests, write to contact@reployia.com.
1. Our role
We decide how personal information is used for our website, accounts and billing. When we process reviews and customer information from a connected Google Business Profile on behalf of a customer, we act as that customer's service provider, and the customer's own privacy notice also applies.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and account data | Name, email, phone, company, job title, password in protected form | You |
| Commercial and billing data | Plan, subscription status, payment history, billing contact. Stripe handles card data. We do not store full card numbers | You, Stripe |
| Google Business Profile data | Business details, locations, reviews, reviewer public names, review photos, ratings, performance data | Google, with your authorization |
| Content | Replies, posts, brand information, images, booking requests | You, your customers |
| Internet activity | IP address, device, browser, pages viewed, clicks, logs | Your device, cookies and similar technologies |
| Approximate location | Derived from IP address | Your device |
| Marketing data | Campaign source, Google click ID | Your device, ad platforms |
| Business contact data | Business name, public email, public phone, Google rating | Public sources, including Google Maps, used to contact businesses about the Service |
We do not seek sensitive personal information. Please do not enter it in the Service.
3. How we use information
We use information to:
- provide, secure and support the Service;
- create accounts and authenticate users;
- connect your Google Business Profile and publish content you approve or allow;
- generate AI drafts, sentiment analysis and reports;
- process payments and manage subscriptions;
- send service, billing and legal messages, and alerts you turn on;
- measure and improve the Service;
- market the Service, as allowed by law;
- detect fraud and comply with legal obligations.
4. Google user data
When you connect a Google account, we access only the data needed to run the features you use, such as your business locations, reviews, media and performance data.
Reploy IA's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google user data only to provide and improve features you can see in the Service. We do not sell it or transfer it to advertising platforms, data brokers or information resellers. We do not use it for advertising. We do not use it to train general AI models. We transfer it only to providers that help run those features, for security, to comply with the law, or in a merger or sale with your prior consent. People can read it only with your agreement, for security or legal reasons, or in aggregated form for internal operations.
We will ask for your consent before we use Google user data in a new way.
You can revoke access at any time in the Service or at Google Account permissions.
5. Artificial intelligence
We send review text, review photos and brand information to OpenAI through its API to draft replies and analysis. OpenAI acts on our behalf. Under OpenAI's API terms, this data is not used to train its models unless a customer opts in, and we have not opted in. OpenAI may keep API inputs and outputs for up to 30 days to provide the service and detect abuse, and then removes them unless the law requires otherwise.
6. How we disclose information
We disclose personal information to:
- Service providers: Supabase (database and login), Cloudflare, Lovable and Contabo (hosting and servers), Stripe (payments), Resend (email), Zernio (Google integration), OpenAI (AI for the Service), Anthropic (AI for our sales assistant, which does not receive connected Google data), and messaging providers for alerts you turn on;
- Advertising and analytics partners: Google Analytics and Google Ads;
- Google: to publish the content you approve or allow;
- Your team: members you invite to your account;
- Authorities and advisers: when the law requires it, or to protect rights and safety;
- Business transferees: in a merger, sale or reorganization.
7. Sale and sharing of personal information
We do not sell personal information for money. We do not sell or share information of known children under 16.
Our use of advertising cookies may count as a "sale" or "sharing" for targeted advertising under some US state laws. In the past 12 months this may have involved identifiers and internet activity, disclosed to advertising and analytics partners for marketing.
You can opt out at any time through Your Privacy Choices in the site footer. We treat Global Privacy Control signals as a valid opt-out for that browser.
8. Cookies and similar technologies
We use cookies and similar tools for login, security, preferences, analytics and advertising. You can control them through Your Privacy Choices and your browser. We do not respond to Do Not Track signals, but we do honor Global Privacy Control.
9. Retention
| Data | Period |
|---|---|
| Account and connected profile data | While the account is open. We delete it within 90 days after you close the account or ask us to delete it |
| Billing and tax records | As long as tax and accounting laws require, usually 5 years |
| Security logs | Up to 12 months |
| Marketing data | Up to 14 months, or until you opt out |
We then delete or anonymize the data.
10. Security
We use technical and organizational measures, including encryption in transit and access controls. No system is completely secure. If a breach affects your information, we will notify you as the law requires.
11. Your US privacy rights
Depending on where you live, including California and other states with privacy laws, you may have the right to:
- know and access the personal information we hold about you;
- correct it;
- delete it;
- receive a portable copy;
- opt out of sale, sharing and targeted advertising;
- limit the use of sensitive personal information, if applicable;
- not be discriminated against for using your rights.
To use these rights, email contact@reployia.com. We will verify your request using your account email. You can use an authorized agent, and we may ask for proof of authorization. We reply within 45 days, and we will tell you if we need more time. If we refuse your request, you can appeal by replying to our decision, and we will answer within 60 days.
If your information reached us through a business that uses Reploy IA, such as in a Google review, please contact that business first. We will help it respond.
California residents can also ask once a year about disclosures for direct marketing.
12. Brazilian data protection law
We are based in Brazil and process personal information there, so the Brazilian General Data Protection Law (Law No. 13,709/2018, LGPD) also applies to our processing. We rely on these legal bases: performance of a contract, consent, legal obligations, the regular exercise of rights and legitimate interests. In addition to the rights above, you may ask us to confirm that we process your data, to anonymize or block unnecessary data, to tell you who receives it and to review consent you gave. You may also complain to Brazil's data protection authority (ANPD). Our channel for data protection requests is contact@reployia.com.
13. Children
The Service is for businesses and is not directed to children under 18. We do not knowingly collect information from children under 13. If you believe we have, write to us and we will delete it.
14. International transfers
We are based in Brazil. Our providers operate in the United States and other countries. Your information may be processed in Brazil, the United States and other countries, where the laws can differ from those of your state. We apply contractual and security safeguards to these transfers.
15. Marketing emails
Every marketing email includes a way to unsubscribe and our postal address. Service, billing and security messages are not marketing, and you will receive them while you have an account.
16. Changes to this Policy
We may update this Policy. We will change the effective date, and if the changes are material we will notify you by email or in the Service before they take effect.
17. Contact
JDigital LTDA, Av. Eng. Luiz Carlos Berrini, 1748, Suite 506, Sao Paulo, SP 04571-000, Brazil. Email: contact@reployia.com.