Privacy Policy
Last updated: May 13, 2026
ReplyTrove ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use the ReplyTrove mobile application and website (collectively, the "Service").
1. Information We Collect
We collect the following types of information:
- Account information: Your email address, business name, and profile details when you create an account.
- Business data: Orders, customer information, product listings, expenses, and notes you create within the app.
- Messages: Content from Instagram Direct Messages and Facebook Messenger conversations accessed via the Meta API, solely to display and manage them within the app.
- Media: Product photos and receipt images you upload, stored securely in our cloud storage.
- Usage data: App interactions, device type, operating system, and crash reports to improve the Service.
- Push notification tokens: To deliver order and task notifications to your device.
2. How We Use Your Information
- To provide and operate the ReplyTrove Service
- To display your Instagram and Facebook Messenger messages within the app
- To send you order updates, task reminders, and important notifications
- To improve app performance and fix bugs
- To respond to your support requests
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your messages or business data for advertising purposes.
3. How We Share Your Information
We share information only with:
- Supabase: Our database, authentication, and file storage provider. Data is stored securely with encryption at rest and in transit. (Supabase Privacy Policy)
- Meta Platforms: We access Instagram and Facebook data through the official Meta Graph API under your authorisation. We do not share your data back to Meta beyond what is required for API functionality. (Meta Privacy Policy)
- Apple / Google: For push notification delivery via their respective push notification services.
- Legal authorities: If required by law, court order, or to protect the rights and safety of users.
4. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law to retain it longer. Business transaction records may be retained for up to 7 years for legal compliance.
5. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data. See our Data Deletion page.
- Portability: Request your data in a portable format.
- Objection: Object to certain types of processing.
To exercise any of these rights, contact us at privacy@replytrove.app.
6. Instagram and Facebook Data
ReplyTrove uses the Meta (Facebook/Instagram) API to access your Instagram Direct Messages and business account data. We only request permissions necessary to provide the Service. We do not store message content beyond what is needed to display it in the app. You can revoke ReplyTrove's access to your Instagram account at any time through your Instagram settings under "Apps and Websites".
7. Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and row-level security policies on our database. However, no system is completely secure and we cannot guarantee absolute security.
8. Children's Privacy
ReplyTrove is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@replytrove.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us: