Privacy Policy

1. Who we are

Replyvana is operated by Avanta LLC. This policy explains what data we collect and how we use it. For data your customers submit through your support channels, you are the controller and we act as your processor.

2. Data we collect

• Account data: name, email, workspace details, and login metadata.
• Support content: conversations, contacts, knowledge-base articles, and attachments you and your customers create.
• Usage data: product analytics and logs to operate and improve the Service.
• Billing data: handled by Stripe; we don’t store full card numbers.

3. How we use data

To provide and secure the Service, generate AI reply drafts at your direction, process payments, provide support, and improve the product. We do not sell your personal data.

4. AI and bring-your-own-key

When you use AI drafting, relevant conversation and knowledge-base content is sent to our AI provider to generate a suggested reply. If you supply your own provider key (BYOK), it is encrypted at rest and used only to make requests on your behalf — never logged or shared.

5. Sub-processors

We use these providers to run the Service:

• Supabase Database, authentication, file storage
• Vercel Application hosting
• Cloudflare Website hosting & CDN
• Anthropic AI reply drafting
• Voyage AI Text embeddings for knowledge-base search
• Resend Transactional & support email
• Stripe Payment processing
• PostHog Product analytics
• Sentry Error monitoring

6. Retention

We keep data for as long as your account is active and as needed to provide the Service. After account closure we delete or anonymize data within a reasonable period, except where we must retain it for legal reasons.

7. Security

Data is encrypted in transit and at rest, access is restricted, and customer AI keys use additional encryption. No system is perfectly secure, but we work to protect your data and to notify you of material incidents.

8. Your rights

Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA), you may have rights to access, correct, export, or delete your personal data. Contact us to exercise them.

9. International transfers

We and our sub-processors may process data in the United States and other countries. We rely on appropriate safeguards where required.

10. Children

The Service is not directed to children under 16, and we don’t knowingly collect their data.

11. Changes

We may update this policy and will revise the date above. Material changes will be communicated where appropriate.

12. Contact

Privacy questions? Email support@replyvana.com.