Legal
Privacy Policy
Last updated September 15, 2026Effective September 15, 2026
This policy explains what personal data ReplyTime (operated by Wavedigits, Inc.) collects, why we collect it, and who to contact with questions — privacy@replytime.net.
01Information we collect
What you give us, what arrives through the API, and what we collect automatically.
Account data you give us directly — your name, work email address, organization name, and billing details processed by our payment provider, Stripe.Event data sent through the API by your automations — client identifiers, channel type, and message timestamps used to calculate response times. We do not store the content of your messages, only the metadata needed to start and stop the SLA clock.Technical data collected automatically — IP address, browser type, and diagnostic or log data generated by using the Service.
02How we use your information
The purposes, kept to a short list.
To operate the Service — running SLA clocks, triggering breach alerts, and generating reports.To provide support, process billing, and monitor for security and abuse.To send Service-related communications, such as billing notices and trial-expiry reminders. We do not send marketing email unless you opt in.
03Legal bases for processing
For GDPR-covered users.
Where the GDPR applies, we process personal data under: contract (to provide the Service you signed up for), legitimate interests (security, fraud prevention, and improving the Service), consent (optional marketing communications), and legal obligation (for example, tax and accounting records).
04Data from your clients
Your role versus ours when your end clients' data flows through the API.
When your own clients' data flows through the ReplyTime API via your automation, you are the data controller and ReplyTime acts as your data processor for that data.A Data Processing Agreement (DPA) is available on request — email privacy@replytime.net.
05Sharing and subprocessors
Who else touches the data.
We use the following subprocessors, each processing data solely to provide their function to ReplyTime: Vercel Inc. (application hosting), Neon Inc. (database hosting), Clerk Inc. (authentication), Stripe Inc. (payment processing), Resend (email delivery), and Inngest Inc. (background job processing). These providers primarily operate in the United States.We will update this list as our subprocessors change and, where required, notify you before adding a new one.
06International transfers
Where data is stored and how transfers are safeguarded.
Our infrastructure and subprocessors are located in the United States. Where personal data is transferred from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses or an equivalent safeguard.
07Data retention
How long each category is kept.
Event and conversation data is retained for the life of your account and deleted within 30 days of account closure, except where we are required to retain it longer by law.Billing records are retained for the period required by applicable tax and accounting law.
08Security
Measures in place.
Data is encrypted in transit (TLS) and at rest. Each tenant's data is logically isolated from other tenants. Access to production data is restricted to authorized personnel, and we investigate and respond to security incidents as they arise.
09Your rights
What users can ask for and how.
Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing.To exercise these rights, email privacy@replytime.net. We respond within 30 days. If you are in the EEA, UK, or Switzerland, you may also lodge a complaint with your local data protection authority.
10Cookies and tracking
What is set in the browser.
We use essential cookies to keep you signed in, and Google Analytics to understand aggregate site usage. You can block analytics cookies in your browser settings without affecting your ability to use the Service.
11Children's privacy
Minimum age statement.
The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If we learn we have done so, we will delete it.
12Changes to this policy
How updates are announced.
We may update this policy from time to time. We will announce material changes by email or an in-app notice at least 14 days before they take effect.
Questions about this policy or a data request? Write to privacy@replytime.net.
Wavedigits, Inc. · 651 N Broad St. Suite 201, Middletown, DE 19709 · United States