Privacy Policy

1. Data Controller

The data controller for this service is:

• Name: HeyRepli Inc. (individual / sole trader)
• Jurisdiction: People's Republic of China
• Privacy Email: [email protected]
• Data Protection Officer (DPO): Not currently appointed

2. Introduction

HeyRepli is an social media concierge platform for small business. We help you engage customers, monitor brand mentions, rewrite content, and schedule posts across X/Twitter, LinkedIn, Facebook, TikTok, Instagram, YouTube, Threads, and Pinterest via 100% official OAuth APIs.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

3. Information We Collect

3.1 Personal Information

When you register, we collect your email, name (optional), password (hashed), and service usage data.

3.2 Usage Data

When you use our service, we log service requests along with your IP address, browser type, and pages visited for security and analytics purposes.

3.3 Social Media Authorization

When you connect social media accounts, we receive OAuth tokens encrypted with AES-256-GCM. We do not store your social media passwords.

4. How We Use Your Information

We use the information to provide, operate, and improve our service, process transactions, send notifications, respond to support requests, monitor usage to keep the platform reliable, and comply with legal obligations.

5. Data Storage and Security

We implement industry-standard security measures: HTTPS/TLS encryption, PBKDF2 password hashing, AES-256-GCM token encryption, Cloudflare D1 database with encryption at rest.

6. Data Sharing and Disclosure

We do not sell or rent your personal information.

Payment card data is processed exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is never stored on our servers.

We may share other data with service providers (Cloudflare, Resend, analytics providers) under confidentiality agreements. We may also share data with social media platforms (per your authorization), legal authorities (when required by law), or in business transfers (mergers, acquisitions).

7. Data Retention

Account data: until deletion. Service request logs: 90 days. OAuth tokens: until disconnect. Payment records: 7 years.

8. Your Rights

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data.

Contact us at: [email protected]

9. Third-Party Services

Our service integrates with: YouTube (Google Privacy Policy), TikTok (TikTok Privacy Policy), X/Twitter (X Privacy Policy), Instagram/Meta (Meta Privacy Policy), LinkedIn (LinkedIn Privacy Policy).

10. Cookies

We use cookies to maintain your session and analyze service usage. You can control cookies through your browser settings.

11. Children Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. By using our service, you consent to such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected] or visit https://heyrepli.com.