Privacy policy

Who we are

Replonic is operated by Replonic, 3500 S Dupont Hwy, Dover, Delaware 19901-6041, United States. For anything in this policy, write to support@replonic.com.

Two different roles

This matters, so it comes first. When you sign up, we are the controller of your account data. When your visitors chat with the bot on your website, you are the controller of that conversation and we only process it on your behalf. Telling your visitors that a chat assistant is running, and what happens to what they type, is your responsibility as the site owner.

What we collect

Your account. Email address, name, company name if you give one, and a password stored only as a salted PBKDF2 hash — we cannot read it. We also record sign-up and last-login timestamps.

Your website content. We fetch the publicly reachable pages of the websites you add and store their text, titles, prices and availability, together with a numeric representation (an embedding) used for search. We only read what any visitor could read: nothing behind a login, basket or checkout.

Conversations. The question, the answer, a session identifier, the time, the visitor's IP address, and the 👍/👎 rating if one is given. This is what lets you see what your customers ask and where the bot fell short. Conversations are deleted automatically after 90 days, and you can delete the whole log from your dashboard at any time.

Payments. Card details never reach us. Polar acts as merchant of record and handles the transaction; we store only the subscription reference, the plan, its status and the date the current period ends.

Technical data. A session cookie that keeps you logged in, ordinary server logs, and abuse counters keyed by IP address so that one visitor cannot exhaust your allowance.

Cookies and browser storage

The dashboard sets one cookie: your login session. There are no advertising, analytics or tracking cookies anywhere on this site.

The chat widget on your website sets no cookies at all. It uses your visitor's sessionStorage to remember the current conversation and a session id, which the browser discards when the tab is closed, plus a single localStorage key for the light/dark preference.

Who else processes the data

To produce an answer, the visitor's question and the matching extracts from your own pages are sent to language-model providers. We use:

• Google — generates the answer text (Gemini API).
• OpenRouter — turns text into embeddings and rewrites follow-up questions into standalone ones.
• Polar — billing and invoicing as merchant of record.
• Our hosting provider — runs the servers and stores the database.

We do not sell your data, and we do not use your content or your visitors' conversations to train our own models.

Where data is stored

Account data, page content and conversations sit on our own server. The providers above process data on their own infrastructure, which may be outside your country. If that matters for your business, tell us before you subscribe.

How long we keep it

Conversations: 90 days. Website content: until you delete the website or close your account — deleting a website removes its pages and its search index immediately. Account and billing records: for as long as the account exists, and afterwards only where accounting law requires it.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Most of it you can do yourself: delete the chat log or a whole website from the dashboard. For anything else, write to support@replonic.com and we will answer within 30 days. If you are in the EU/EEA or the UK you can also complain to your national data protection authority.

Security

Traffic runs over HTTPS. Passwords are hashed, never stored in readable form. The widget only accepts requests coming from your own domain, so a stolen site key cannot be used on someone else's website. No system is perfect — if you find a weakness, please tell us before telling anyone else.

Children

The service is sold to businesses and is not intended for children. Do not use it to collect information from children knowingly.

Changes

If we change this policy in a way that affects you, we will say so on this page and, for anything material, by email before it takes effect.