ReplySlot
PrivacyTermsLog in
Legal

Privacy notice

This notice explains how ReplySlot processes account, customer-conversation, and appointment data when businesses use the service.

Last updated 5 August 2026

Data we process

Account and team details; business configuration; contacts supplied by a customer or workspace; message content and delivery metadata; appointment, calendar, and payment-link metadata; usage, audit, device, and security logs.

Why we process it

To provide messaging and booking features, authenticate users, synchronize calendars, deliver reminders, prevent abuse, support customers, bill subscriptions, and comply with legal obligations. Workspaces are responsible for choosing an appropriate legal basis for the customer data they submit.

AI-assisted replies

ReplySlot can use an AI model to draft or send replies. Automated conversations should identify themselves as AI-assisted. Workspace administrators control approved knowledge, handoff thresholds, and whether automation is enabled.

Service providers

Data may be processed by configured infrastructure, AI, messaging, calendar, email, monitoring, and payment providers. WhatsApp, Instagram, Google, OpenAI, Stripe, and an email provider receive data only when the related integration is enabled.

Retention and security

Messages are retained for the workspace-configured period; operational webhook records use a shorter retention period. Credentials are encrypted at rest, access is role-controlled, and security-relevant actions are audited. No internet service can promise absolute security.

Your choices and rights

Workspace owners can export data and schedule workspace deletion from Settings. Depending on applicable law, individuals may request access, correction, deletion, restriction, portability, or object to processing through the business they contacted or the service operator.

International transfers and changes

Some configured providers may process data outside the EEA using an applicable transfer mechanism. Material changes to this notice will be dated and communicated through the service where appropriate.

Before production launch, add the operator’s registered company name, address, tax details, privacy contact, governing law, and signed processor agreements.