How ReploChat, operated by GOFTECH, collects, uses, protects, and shares your information.
Last updated: 18 June 2026
This policy explains what data we handle when you use ReploChat — an all-in-one platform built on the official WhatsApp Business Platform (Meta Graph API) — and the rights you have over it.
On this page
ReploChat is a WhatsApp Business messaging platform operated by GOFTECH ("ReploChat", "we", "us", "our"). We help businesses connect their own WhatsApp Business numbers and send campaigns, run chatbot flows, manage a shared inbox, and handle contacts and bookings, using the official WhatsApp Business Platform and Meta Graph API. This policy applies to our website, web application, and companion mobile app.
This policy serves both Pakistan-based and international users (including the EU/EEA, UK, and California). Where local law gives you additional rights, those rights apply.
We do not sell your personal data, and we do not use the content of your WhatsApp conversations for advertising.
ReploChat connects to your WhatsApp Business number through Meta. When you message your customers:
Your use of WhatsApp through ReploChat is also subject to the WhatsApp Business Messaging Policy and the Meta Platform Terms. If you connect Facebook or Instagram channels, related Page/Instagram data is handled the same way.
Where the GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the service to you | Performance of a contract |
| Security, fraud prevention, improvements | Legitimate interests |
| Marketing communications | Consent (withdrawable anytime) |
| Legal/tax obligations | Legal obligation |
We use trusted third parties to run the service. Each handles only the data needed for its function:
| Provider | Purpose |
|---|---|
| Meta Platforms | WhatsApp Business / Graph API message delivery |
| Google Firebase | Push notifications to your devices |
| Pusher / Reverb | Real-time updates in the app |
| Google (Gemini) | Optional AI-assisted replies, where you enable them |
We may update this list as our infrastructure evolves; material changes will be reflected here.
We share data only: with the sub-processors above; with Meta to deliver your messages; when required by law or to protect rights and safety; and in connection with a business transfer (e.g. merger or acquisition), subject to this policy. We never sell your personal data.
We keep your data for as long as your account is active and as needed to provide the service. When you request deletion, your account is deactivated and your data is retained for a limited window before erasure (see the Delete Account page). We may retain certain records longer where required for legal, tax, or security reasons. You can request erasure at any time (see your rights below).
We apply technical and organisational measures to protect your data, including encryption of sensitive credentials at rest (such as your WhatsApp access tokens), encrypted transport (HTTPS), access controls, and signature verification on inbound webhooks. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.
Subject to your local law, you may have the right to:
To exercise any of these, contact us using the details below, or delete your account via the Delete Account page. We will respond within the timeframe required by applicable law.
If you are in the EU/EEA or UK, you have the rights listed above and the right to lodge a complaint with your local data protection authority. For the customer data you process through ReploChat, you act as the data controller and we act as your processor; on request we can provide reasonable assistance with your own GDPR obligations.
If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising your rights. We do not sell or "share" personal information as defined by the CCPA/CPRA. To make a request, contact us using the details below.
We operate from Pakistan and use providers that may process data in other countries. Where data is transferred internationally, we take steps to ensure it remains protected consistent with this policy and applicable law.
We use essential cookies to keep you signed in and to keep the app secure, and limited analytics to understand and improve usage. You can control cookies through your browser settings; disabling essential cookies may break core functionality.
ReploChat is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
If a breach affects your personal data, we will investigate, take remedial action, and notify affected users and the relevant authorities where required by law and within the applicable timeframes.
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice. Continued use after changes take effect means you accept the updated policy.
Questions or privacy requests? Reach GOFTECH at:
This Privacy Policy is provided for general information and is not legal advice. We recommend reviewing it with a qualified professional to confirm it meets your specific regulatory obligations.