Privacy Policy
How ReploChat, operated by GOFTECH, collects, uses, protects, and shares your information.
ReploChat Privacy Policy
This policy explains what data we handle when you use ReploChat — an all-in-one platform built on the official WhatsApp Business Platform (Meta Graph API) — and the rights you have over it.
On this page
1. Who we are
ReploChat is a WhatsApp Business messaging platform operated by GOFTECH ("ReploChat", "we", "us", "our"). We help businesses connect their own WhatsApp Business numbers and send campaigns, run chatbots, WhatsApp Flows and automations, manage a shared inbox, and handle contacts, using the official WhatsApp Business Platform and Meta Graph API. This policy applies to our website, web application, and companion mobile app.
This policy serves both Pakistan-based and international users (including the EU/EEA, UK, and California). Where local law gives you additional rights, those rights apply.
2. Information we collect
Information you provide
- Account data — name, email, phone number, password (stored hashed), and business name.
- Business profile data — your display name, "about" text, and profile settings.
- WhatsApp credentials — your WhatsApp Business access token, phone number ID, and business ID. Access tokens are encrypted at rest.
- Billing data — your subscription plan and payment references (we do not store full card numbers).
- Support data — messages you send to our support team.
Information created through use
- Messaging content — WhatsApp messages you send and receive through ReploChat, including media and delivery/read status.
- Contacts — the customer contacts and labels you import or create.
- Templates, campaigns, flows and form responses — the content and configuration you build.
- Usage & device data — log data, IP address, browser/device information, and actions taken in the app.
3. How we use your information
- Provide, operate, and maintain the platform and its features.
- Send and receive WhatsApp messages on your behalf via Meta's API.
- Authenticate you, secure your account, and prevent abuse and fraud.
- Provide customer support and respond to your requests.
- Send service and account notifications (and, with consent, product updates).
- Improve and develop features, and produce aggregated, non-identifying analytics.
- Comply with legal obligations and enforce our Terms & Conditions.
We do not sell your personal data, and we do not use the content of your WhatsApp conversations for advertising.
4. WhatsApp & Meta platform data
ReploChat connects to your WhatsApp Business number through Meta. When you message your customers:
- You are the controller of your customers' data (their phone numbers, names, and the conversations you have with them). You are responsible for having a lawful basis and the necessary consent/opt-in to message them.
- We act as your processor, handling that data on your instructions to deliver the service.
- Meta processes message traffic as part of the WhatsApp Business Platform under its own terms.
Your use of WhatsApp through ReploChat is also subject to the WhatsApp Business Messaging Policy and the Meta Platform Terms. If you connect Facebook or Instagram channels, related Page/Instagram data is handled the same way.
5. Legal bases for processing (GDPR)
Where the GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the service to you | Performance of a contract |
| Security, fraud prevention, improvements | Legitimate interests |
| Marketing communications | Consent (withdrawable anytime) |
| Legal/tax obligations | Legal obligation |
6. Sub-processors
We use trusted third parties to run the service. Each handles only the data needed for its function:
| Provider | Purpose |
|---|---|
| Meta Platforms | WhatsApp Business / Graph API message delivery |
| Google Firebase | Push notifications to your devices |
| Pusher / Reverb | Real-time updates in the app |
| Google (Gemini) | Optional AI-assisted replies, where you enable them |
We may update this list as our infrastructure evolves; material changes will be reflected here.
7. How we share information
We share data only: with the sub-processors above; with Meta to deliver your messages; when required by law or to protect rights and safety; and in connection with a business transfer (e.g. merger or acquisition), subject to this policy. We never sell your personal data.
8. Data retention
We keep your data for as long as your account is active and as needed to provide the service. When you request deletion, your account is deactivated and your data is retained for a limited window before erasure (see the Delete Account page). We may retain certain records longer where required for legal, tax, or security reasons. You can request erasure at any time (see your rights below).
9. Security
We apply technical and organisational measures to protect your data, including encryption of sensitive credentials at rest (such as your WhatsApp access tokens), encrypted transport (HTTPS), access controls, and signature verification on inbound webhooks. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.
10. Your rights & choices
Subject to your local law, you may have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Port your data to another service.
- Restrict or object to certain processing.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these, contact us using the details below, or delete your account via the Delete Account page. We will respond within the timeframe required by applicable law.
11. GDPR (EU/EEA/UK users)
If you are in the EU/EEA or UK, you have the rights listed above and the right to lodge a complaint with your local data protection authority. For the customer data you process through ReploChat, you act as the data controller and we act as your processor; on request we can provide reasonable assistance with your own GDPR obligations.
12. CCPA (California users)
If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising your rights. We do not sell or "share" personal information as defined by the CCPA/CPRA. To make a request, contact us using the details below.
13. International data transfers
We operate from Pakistan and use providers that may process data in other countries. Where data is transferred internationally, we take steps to ensure it remains protected consistent with this policy and applicable law.
14. Cookies & tracking
We use essential cookies to keep you signed in and to keep the app secure, and limited analytics to understand and improve usage. You can control cookies through your browser settings; disabling essential cookies may break core functionality.
15. Children's privacy
ReploChat is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
16. Data breaches
If a breach affects your personal data, we will investigate, take remedial action, and notify affected users and the relevant authorities where required by law and within the applicable timeframes.
17. Changes to this policy
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice. Continued use after changes take effect means you accept the updated policy.
18. Contact us
Questions or privacy requests? Reach GOFTECH at:
- Email: support@replochat.com
- WhatsApp (Support): +92 339 4683250
- WhatsApp (Sales): +92 335 5265622
This Privacy Policy is provided for general information and is not legal advice. We recommend reviewing it with a qualified professional to confirm it meets your specific regulatory obligations.