Privacy Policy

Last updated: July 5, 2026

Who we are

Repliva ("we", "us") is an omnichannel messaging platform operated by Orbit Tech Lab. This policy explains what data we collect, why we collect it, and the choices you have. It applies to the Repliva web app at chat.orbittechlab.com and the Repliva mobile app.

Data we collect

  • Account data — your name, email address, and a hashed password (we never store passwords in plain text).
  • Channel data — when you connect a channel (WhatsApp, Messenger, Telegram, Slack, or Email), we process the messages and contacts on that channel so we can display them in your inbox, deliver your replies, and run the automation rules you configure.
  • AI provider keys — if you add your own API key, it is stored server-side, used only to generate the replies you request, and never shared with other users or third parties. You can rotate or remove keys at any time in Settings.
  • Payment data — payments are processed by Stripe. Your card details never touch our servers; we only receive a confirmation of the completed purchase and your credit balance.
  • Usage data — basic analytics about your own account (message volume, auto-reply rate) that power the Analytics page you see in the dashboard.

What we do not do

  • We do not sell your data. To anyone. Ever.
  • We do not use your messages or contacts to train AI models.
  • We do not proxy your conversations through our own AI accounts when you use your own key — AI requests go directly to the provider you chose, under your account and their data policies.
  • We do not read your conversations except where required to operate the service or investigate abuse.

Legal basis and retention

We process your data to provide the service you signed up for (performance of a contract) and to keep the platform secure (legitimate interest). Message data is retained while your account is active so your inbox history keeps working. If you disconnect a channel, we stop receiving new messages from it. If you want your account and its data deleted, contact us and we will remove it.

Third parties we rely on

  • Stripe — payment processing (PCI-DSS compliant).
  • Vercel — web hosting and content delivery.
  • Your chosen AI provider (Google Gemini, OpenAI, Anthropic, Groq, DeepSeek, or local Ollama) — only when you enable AI replies.
  • The messaging platforms you connect — WhatsApp, Meta (Messenger), Telegram, Slack, and your email provider, each governed by their own terms.

Your rights

You can access and update your account data in Settings, disconnect any channel at any time, remove AI keys at any time, and request a full export or deletion of your data by contacting us. If you are in the EU/EEA or UK, you additionally have the rights granted by the GDPR, including the right to lodge a complaint with your supervisory authority.

Contact

Privacy questions: support@orbittechlab.com. We will update this policy as the product evolves and note the date of the latest revision at the top of this page.