Privacy policy

Last updated: 4 October 2026

Replychime is a service of Build Beyond Hightech LLC, Sheridan, WY 82801, USA (“Replychime”, “we”, “us”). This policy explains what personal data we process when you visit replychime.com, request a preview, or use Replychime to manage your business’s social media and messaging, and what your rights are.

Contact for anything in this policy: hello@replychime.com.

1. Who is responsible

Website visitors and preview requests: Build Beyond Hightech LLC is the controller of the data you give us.

Our clients’ customers: when Replychime answers comments and messages on behalf of a business (our client), that business is the controller of its customers’ data, and we act as its processor. We process that data only on the client’s instructions and only to provide the service. If you are a customer of one of our clients, you can contact the business directly or write to us and we will pass your request on.

2. What we collect

From you, directly

• Preview and sign-up details: business name, city, country, page URL, WhatsApp number, email, preferred language.
• Business facts you approve: opening hours, services, prices, booking links and similar information.
• Billing details, handled by our payment provider. We do not store full card numbers.
• Messages you send us by email or WhatsApp.

Through the Meta platform, when you connect your accounts

When a client connects their Facebook Page, Instagram professional account or WhatsApp Business number using Meta’s login, we access, with the permissions the client grants:

• Page and account content: posts, captions, images and videos, and basic page or account information (name, ID, profile picture, category).
• Comments on the client’s posts, including the commenter’s public name and profile ID.
• Direct messages sent to the client’s Facebook Page or Instagram account, including the sender’s name, profile ID and any attachments.
• WhatsApp messages sent to the client’s WhatsApp Business number, including the sender’s phone number, profile name, message text, voice notes and files.
• Basic insights such as reach and engagement on the client’s posts, used for the weekly summary.

We never ask for or store your Facebook, Instagram or WhatsApp password. Access works through tokens issued by Meta, which you can revoke at any time in your Meta settings.

Automatically, on our website

Our web server keeps short technical logs (IP address, browser type, page requested, time) for security and troubleshooting. We do not use advertising cookies or third-party trackers on replychime.com.

3. What we use it for

We use Meta platform data only to provide the Replychime service to the client who connected the account:

• publishing the posts the client approved;
• reading incoming comments and messages and drafting or sending replies from the client’s approved business facts;
• sending items that need a human (complaints, unknown prices, sensitive topics) to the client;
• producing the client’s weekly summary and reports;
• keeping the service secure, and investigating errors or abuse.

We use preview details to prepare your preview and to contact you about it.

4. What we never do

• We do not sell personal data or share it for advertising.
• We do not use client data or their customers’ messages to train AI models, ours or anyone else’s. We use AI model providers under terms that do not allow them to train on the data we send.
• We do not use data from one client’s accounts to serve another client.
• We do not contact a client’s customers for our own purposes.

5. Legal bases (GDPR)

• Contract: to provide the service a client signed up for, and to prepare a requested preview.
• Legitimate interests: security, fraud prevention and improving how the service works, balanced against your rights.
• Consent: where we ask for it, for example the consent box on the preview form. You can withdraw it at any time.
• Legal obligation: keeping billing records as required by law.

6. How long we keep it

• Message logs (comments, DMs, WhatsApp messages and our replies): 12 months, then deleted.
• Business facts and post calendar: for as long as the client uses Replychime, then deleted within 30 days of cancellation unless the client asks us to delete sooner.
• Preview requests that do not become clients: 12 months.
• Billing records: as long as tax law requires.
• Access tokens: deleted when the client disconnects or cancels.

7. Who we share it with (sub-processors)

A current list of named sub-processors is available on request at hello@replychime.com. We may also disclose data if the law requires it.

8. International transfers

We are based in the United States and some of our providers process data outside the European Economic Area. Where we transfer personal data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

9. Your rights

Depending on where you live, including under the GDPR, you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• have your data deleted;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time;
• complain to your local data protection authority.

To use any of these rights, email hello@replychime.com. We reply within 30 days.

10. Deleting your data

See our data deletion instructions for how to remove Replychime’s access and request deletion of your data, including data we received through Facebook, Instagram or WhatsApp.

11. Security

We encrypt data in transit, keep access tokens encrypted at rest, limit staff access to what is needed to run the service, and log access to client data.

12. Children

Replychime is a service for businesses and is not directed at children under 16.

13. Changes

We will post any changes on this page and update the date at the top. If a change is significant, we will tell clients by email before it takes effect.