Privacy Policy — AutoReply

AutoReply (“AutoReply”, “we”, “us”) is a dashboard that links to your WhatsApp number and replies to messages on your behalf. This policy explains what information we handle when you visit this website, sign up, or use the AutoReply dashboard, and what you can do about it. It is written to meet India’s Digital Personal Data Protection Act, 2023 and to be clear for customers elsewhere.

1. The short version

We store what is needed to run the service for you: your login, your WhatsApp session, your messages, contacts, rules and templates.
We do not sell your data, show you ads, or use your messages to train AI models.
Message text is only sent to an AI provider if you switch on AI mode and add your own API key.
You can delete your WhatsApp account and everything stored for it at any time from Settings → Your data.
Payments are made by UPI directly to our bank account. We never see or store your card or bank login details.
Your email is optional. We don’t send marketing emails, and we don’t share your email with anyone.
Anyone who replies STOP to your automated messages is blocked from further messages, automatically.

2. What we collect

When you sign up

Your name, your mobile number (used to sign in), your password — which we store only as a salted one-way hash — your date of birth (to confirm you’re at least 12), and your answers to two quick questions: roughly how many customers you have and how you’ll use AutoReply (so we know who it’s for and what to improve). We also record when you signed up and the IP address and browser/device type it came from (used to stop spam and fake sign-ups).

Your dashboard account

Your plan, trial and billing dates, when your next payment is due, and the payments you’ve made (including ones we record by hand when you pay us another way, with a short note), so we can keep your account running. You can add, change or remove your email at any time in Settings → Your email.

Your WhatsApp connection

When you scan the QR code, AutoReply becomes a linked device on your WhatsApp account, like WhatsApp Web. To work, it stores on our server:

The session keys WhatsApp issues to linked devices, so it can stay connected.
Messages it receives and sends while linked (text, captions and descriptions of media such as “📷 Photo”), with the time, the contact and whether the bot replied — this powers your Activity, Analysis and the AI’s memory of a conversation.
Contact names from your WhatsApp address book that WhatsApp shares with linked devices, and any names you set yourself.
The rules, templates, groups, images you upload for replies, and settings you create.
Flows you build, and — so a conversation can continue — which step each contact has reached in a flow and their latest answer. Unfinished flows are forgotten after 24 hours. We also keep simple counts of how often each flow ran.
Custom Send schedules: the contact, the message, the dates and how it repeats, plus a short history of each send (sent, skipped or failed).
Contacts who replied STOP, so they are never messaged again, and a link between a contact’s phone number and the private ID WhatsApp sometimes uses for them, so each person appears once.

We do not download or store photos, videos, voice notes or documents that people send you — only a short label describing them.

AI mode (only if you use it)

If you add an OpenAI, Anthropic or Google API key, the key is stored encrypted and never sent back to your browser. We keep a count of tokens used and the estimated cost so you can see it in Usage.

Payments

When you pay by UPI, you send money from your own UPI app directly to our UPI ID. We store the plan you chose, the amount and when you told us you paid, so we can match it in our UPI app or bank statement (the payment note includes your plan and mobile number). If you use a coupon, we record the code and the discount. We never receive your UPI PIN, card number or bank login.

Support tickets and announcements

When you raise a support ticket we store its subject, category, your messages and our replies, plus the dashboard page you were on, your plan and a simple device description, to help us fix the problem. When we post an announcement in the dashboard, we record whether you’ve dismissed it so it isn’t shown again.

Usage and security information

To keep the service secure and understand which features are used, we log events such as sign-ins, failed sign-ins, WhatsApp connects and disconnects, and which dashboard pages and features are used. Each event records the time, your account, your IP address and a simple device description (for example “Chrome on Android”). These logs never contain message text.

This website

This marketing site does not use analytics or advertising trackers. Our hosting and network provider (Cloudflare) processes standard technical information such as IP addresses to deliver the site and protect it from attacks.

3. How we use it

To run the service you asked for: receive your messages and send the replies, flows, menus, bulk messages and scheduled messages you set up, and show your history and analytics.
To manage your account: set up your login, run your free trial, remind you before your trial or plan renews, activate paid plans and record payments. If a payment is more than 3 days late, auto-replies and sending pause until it’s paid — nothing is deleted.
To keep things secure: spot suspicious sign-ins, stop fake or repeated sign-ups and abuse, and fix problems.
To talk to you: answer your support tickets and show account notices and announcements in the dashboard (for example, that your trial is ending). We do not send marketing messages without your permission.

We process this information because it is needed to provide the service you signed up for, and, where required, on the basis of your consent — which you can withdraw at any time by contacting us or deleting your account.

We do not sell or rent your personal data. We only share it with:

WhatsApp / Meta — messages you send through AutoReply are delivered by WhatsApp, under WhatsApp’s own terms and privacy policy.
Your chosen AI provider (OpenAI, Anthropic or Google) — only if you turn on AI mode. The incoming message, recent conversation, the contact’s name and your instructions are sent to generate a reply, under that provider’s terms for API customers.
Infrastructure providers — such as Cloudflare, which carries traffic to our server.
Authorities — if we are legally required to, or to protect our users or the service from fraud or harm.

5. Where it is stored and how it is protected

Your data is stored on servers we operate. Traffic to the dashboard is encrypted with HTTPS, passwords are hashed, API keys are encrypted at rest, and each user can only see their own WhatsApp accounts. Session cookies are HttpOnly so page scripts cannot read them. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authorities as the law requires.

6. How long we keep it

Messages, contacts, rules, templates, flows, Custom Send schedules and settings: for as long as the WhatsApp account exists in your dashboard. If your trial or plan ends, we keep them so you can continue later — until you delete the account.
Where a contact is in a flow: 24 hours, then forgotten.
Your login, email, support tickets and announcement history: for as long as you have a dashboard account. Ask us to close it and they are deleted.
Security and usage logs: up to 12 months, then deleted automatically.
Payment records: as long as needed for accounting and tax law.
Old access requests (from before self sign-up): deleted automatically 90 days after they were handled — or sooner if you ask us to.

7. Your choices and rights

Delete everything: Settings → Your data → Delete account and all data unlinks WhatsApp and permanently deletes that account’s messages, contacts, rules, templates, groups, flows, Custom Send schedules, uploaded images, AI key and usage.
Close your dashboard login (your name, number, email, tickets) by raising a support ticket or contacting us.
Remove your email any time: empty it in Settings → Your email and save.
Unlink WhatsApp at any time from the Connection page, or from your phone under WhatsApp → Linked Devices.
Access, correct or erase your personal data, or withdraw consent, by contacting us. We will respond within 30 days.
Complain to us first; if you are not satisfied, you may complain to the Data Protection Board of India or your local data protection authority.

8. Cookies and local storage

The dashboard uses a single essential cookie to keep you signed in (30 days). Your browser’s local storage remembers small preferences such as your theme, last opened tab and dashboard panel. This website stores nothing about you. We use no advertising or tracking cookies.

9. Your WhatsApp contacts

When you use AutoReply, we process information about the people you chat with — their phone number, name and the messages they exchange with you — on your behalf. You are responsible for using AutoReply lawfully with your contacts: only send bulk, scheduled or automated messages to people who expect to hear from you, and respect requests to stop. AutoReply only auto-replies to contacts you switch on — except a flow you set up to greet people who write to you for the first time. Every bulk and scheduled message ends with “Reply STOP to stop messages”, and anyone who replies STOP is blocked from all further messages until they reply START.

10. Children

AutoReply is not meant for children under 12, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the product changes. We will change the date at the top, and for significant changes we will tell you in the dashboard before they take effect.

12. Contact us

Questions, requests or complaints about privacy:

Email: [email protected]
WhatsApp: +91 83688 77631