Replyflow AIPrivacy Policy
Last updated 27 October 2026
Who we are
Replyflow AI ("we") is a service that lets shops answer their customers on Facebook Messenger and Telegram with an AI assistant. This policy explains what data we handle and why.
Data from shop owners
When a shop signs up we store the account email, a password hash or Google sign-in details, the shop's settings (business info, FAQs, products, prices) and, when the shop connects Facebook, the Facebook Page ID, Page name and a Page access token. Tokens are kept on our servers only and are never shown in the browser.
Data from customers who message a shop
When a customer messages a connected Facebook Page or Telegram bot, we receive the message text (and voice notes or images they send), their Messenger or Telegram ID and the name the platform shares. We store the conversation so the shop can read it in its inbox, and we send the message to an AI model to write the reply.
How we use data
Only to run the service: show conversations to the shop, write and send replies, create order payment QR codes, and keep the service secure. We do not sell data, show ads, or use customer conversations to train our own models.
Service providers
AI replies are generated by AI model providers (such as OpenAI, Anthropic or Google) through a secure API; messages are delivered through Meta (Facebook Messenger) and Telegram; files are kept in secure cloud storage. Each provider receives only what is needed to do its part.
Facebook data
We use the Facebook permissions pages_show_list, pages_messaging and pages_manage_metadata only to list the Pages a shop owner chooses, receive messages sent to those Pages and reply to them. A shop can disconnect its Page at any time in Channels, which removes the Page token from our system.
Keeping and deleting data
We keep data while the shop's account is active. A shop owner can delete conversations, products or disconnect channels at any time. To delete an account or ask us to delete messages about you, see our Data Deletion page.
Security
Data is sent over HTTPS, passwords are hashed, access tokens are stored only on the server, and each shop can only see its own data.
Contact
Questions about privacy: mond24036@gmail.com