Privacy Policy

Last updated: November 9, 2026

This policy explains which personal data Replaize processes, why, and what your rights are. It applies to the website https://replaize.com and to the Replaize service.

1. Who is responsible

• For the data of our customers and website visitors (account, billing, contact): LVO L.L.C-FZ is the data controller (or "business" under California law).
• For the data of our customers' leads (people who message a customer on Instagram, WhatsApp, Messenger or TikTok): the customer is the data controller and LVO L.L.C-FZ acts as a processor (or "service provider" under California law), under the Data Processing Agreement.

Contact: contact@replaize.com.

2. Data we process

• Account: name, email address and photo from your Google sign-in, organization, role, preferences.
• Billing: billing details and subscription history. Card data is processed by Stripe and is never stored by Replaize.
• Connected accounts: technical identifiers of the Instagram, WhatsApp, Facebook, TikTok, Calendly or iClosed accounts you connect.
• Conversations and leads: messages, comments, usernames, phone numbers, notes, tags and appointments of the people who chat with you.
• AI configuration: your agents' settings and, where applicable, your OpenAI or Anthropic API key, stored encrypted.
• Contact and support: the information you send us.
• Technical data: sign-in and security logs.

3. Why we process it

• to provide the service (replies, qualification, CRM, follow-ups, call booking) - performance of the contract;
• to manage subscriptions and billing - performance of the contract and legal obligations;
• to keep the service secure and prevent abuse - legitimate interest;
• to answer your requests - legitimate interest;
• to measure traffic on the public pages of the website and the performance of our own advertising campaigns (see below) - legitimate interest;
• to inform you of important changes to the service - legitimate interest.

Website analytics and advertising. To understand how the website is used and to measure our own advertising campaigns, replaize.com uses: Vercel Web Analytics (anonymous traffic, no cookies), the Meta pixel and its Conversions API (page views, sign-in clicks, sign-ups), Google Analytics 4 (traffic), Microsoft Clarity (session recordings of public pages and heatmaps, with no form input captured) and PostHog (journeys on the website, linked to your email address once you sign up). Except for Vercel, these tools set cookies or identifiers in your browser. Once you are signed in, no page of the application is measured or recorded, and your leads' conversations are never sent to these tools. You can opt out at any time with the "Refuse tracking" button at the bottom of this page: none of these tools will be loaded in this browser anymore.

Replaize does not sell personal data. Your leads' conversations are not used to train AI models on behalf of Replaize.

4. Recipients and sub-processors

Data is accessible only to authorized personnel and is shared with the providers needed to run the service:

• Vercel (hosting of the website and the application, anonymous cookie-free analytics);
• Meta, Google, Microsoft and PostHog (website analytics and advertising, see above);
• Convex (database and processing);
• Stripe (payments);
• Resend (email delivery);
• Cloudflare (file storage);
• Zernio (connection to the Instagram, WhatsApp, Messenger and TikTok messaging platforms);
• Meta and TikTok (connected messaging platforms);
• Google (account sign-in);
• Calendly and iClosed (if you connect them);
• OpenAI or Anthropic (reply generation, through Replaize's key).

5. Retention periods

• account and configuration: for the duration of the subscription, then deleted within 90 days after the workspace is closed, unless you request otherwise;
• conversations and leads: for the duration of the subscription, according to the customer's settings;
• billing: as long as required by accounting and tax obligations;
• technical logs: 12 months at most.

6. Security

Access restricted per organization, encrypted connections, encryption of customers' API keys, strict separation of each customer's data.

7. Your rights

You have the right to access, correct, delete, restrict and object to the processing of your data, and the right to data portability. To exercise these rights: contact@replaize.com. If you are a lead of a Replaize customer, please contact that customer first, as the data controller; we will help them respond.

8. European Union and United Kingdom residents

If you are located in the European Union or the United Kingdom, the rights above are granted under the GDPR (and the UK GDPR), including the right to define directives on the fate of your data after your death where applicable. You may also lodge a complaint with your supervisory authority (in France, the CNIL - cnil.fr).

9. Cookies

See the Cookie Policy.

10. California residents (CCPA/CPRA)

This section applies to California residents and supplements the rest of this policy, in accordance with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

Categories of personal information collected in the last 12 months: identifiers (name, email address, account and messaging identifiers), commercial information (subscription and billing history), internet or network activity (sign-in logs, interactions with the public pages of the website), and the content of communications you choose to send through the service. We collect this information directly from you, from the accounts you connect and from the analytics tools described in section 3, for the purposes described in section 3.

No sale or sharing. Replaize does not sell personal information and does not share it for cross-context behavioral advertising. The Meta pixel is used only to measure our own advertising campaigns on the public pages of the website, and you can disable it with the "Refuse tracking" button at the bottom of this page. We do not knowingly collect personal information from anyone under 16.

Your rights. You have the right to know what personal information we collect, use and disclose; to request its deletion; to request that inaccurate information be corrected; to opt out of any sale or sharing (we do neither); and not to be discriminated against for exercising these rights.

How to exercise them. Email contact@replaize.com or use the contact form. We will verify your request using the email address linked to your account or, if you do not have an account, by asking for information that allows us to match you to the data we hold. You may designate an authorized agent to make a request on your behalf; we may ask the agent for proof of authorization and ask you to confirm your identity directly.

Leads of our customers. When you message a Replaize customer, that customer decides how your information is used and Replaize acts as a service provider under the CCPA/CPRA. Please direct your request to that customer; we will assist them in responding.

11. International transfers

LVO L.L.C-FZ is established in the United Arab Emirates and relies on providers located mainly in the United States (Vercel, Convex, Stripe, Resend, Cloudflare, OpenAI or Anthropic, Meta, Google, Microsoft, PostHog). Your data may therefore be processed in the United States, in the United Arab Emirates and in the countries where these providers operate.

For individuals located in the European Union or the United Kingdom, transfers outside those territories rely on the safeguards provided by the GDPR: the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) or an adequacy decision, depending on the provider.