Data Processing Addendum

You are the responsible party determining the purpose and means of processing your customers’ personal information. Replai is the operator and processes it only on your documented instructions, including those given through the dashboard.

Replai processes contact and conversation data for the duration of your subscription, solely to deliver the messaging, AI, inbox, bookings, ecommerce and analytics features you enable.

Replai keeps personal information confidential, restricts access to authorised personnel under confidentiality obligations, and maintains the technical and organisational measures described in our POPIA page and Privacy Policy.

You authorise Replai to engage sub-operators (such as cloud hosting and AI model providers) under written terms imposing equivalent obligations. We remain responsible for their performance.

Replai will assist you with data-subject requests and security measures, and will notify you without undue delay after becoming aware of a personal-information breach affecting your data.

On termination, Replai will, at your choice, return or delete the personal information it processes for you, except where retention is required by law.

Businesses that require a countersigned DPA can request one from privacy@replai.co.za.