Privacy policy

1. Who we are

AnytimeReply is operated by AnytimeReply. You can reach us at our contact page.

2. Information we collect

From account holders (businesses using the Service)

• Account details — your name, email address and a securely hashed password; for team members, the same details added by the account owner.
• Billing details — the plan you choose and payment references from our payment partners (such as transaction IDs). We don't store full card numbers.
• Business content — websites you ask us to read, files, text and Q&A you upload, instructions and settings.
• Connected accounts — when you connect WhatsApp, Telegram, a Facebook Page or an Instagram professional account, we store the identifiers and access tokens needed to send and receive messages for you (for example your Page ID, Page name, Instagram account ID and username).

From your customers (people who chat with an agent)

• Messages sent to an agent on a website, WhatsApp, Messenger, Instagram or Telegram, including voice notes and images, which may be transcribed or described automatically.
• Contact details the channel provides or the customer shares — such as name, phone number, platform user ID or email address.
• Technical data — a random visitor ID stored in the browser so a website chat can continue, and the page URL where the chat started.

Automatically

• Log and security data such as IP address, browser type and timestamps, used to keep the Service secure and prevent abuse.
• A login cookie that keeps you signed in.
• On our own website and dashboard, analytics and advertising cookies from Google Analytics and the Meta (Facebook) Pixel. They record the pages visited and actions such as signing up or buying a plan. They are never used in the chat widget on your website, in your help center or in our mobile app. See our cookie policy.

3. How we use information

• To provide the Service: train your agent on your content, generate replies, deliver messages on the channels you connected and show conversations in your inbox.
• To show analytics such as topics, sentiment, ratings and unanswered questions to the account holder.
• To notify your team (for example a WhatsApp or Slack alert when a customer needs a person) and send events to integrations you set up.
• To process payments, provide support, keep the Service secure and comply with the law.
• To understand how people find and use our website and to measure our own advertising. For this Google and Meta receive the pages visited, those actions and, for signed-in account holders, a one-way hashed (SHA-256) email address and user ID. They never receive your plain email address, your business content or your customers' messages.

We do not sell personal information and we do not use your content or your customers’ messages for advertising.

4. Our role for customer conversations

For messages exchanged between a business and its customers, the business decides how the agent is used and is responsible for its own privacy notice. We process those messages on the business’s behalf to provide the Service.

5. Service providers

We share information only with providers that help us run the Service, and only as needed:

• AI model providers — message text and the relevant parts of your business content are sent to AI providers to generate replies, embeddings, transcriptions and image descriptions.
• Hosting and infrastructure — servers and databases where the Service and its data are stored.
• Messaging platforms — WhatsApp, Meta (Facebook Messenger and Instagram) and Telegram, to deliver messages on channels you connect.
• Integrations you enable — such as Slack, Zapier, Make or your own webhook, which receive the events you choose.
• Analytics and advertising - Google (Google Analytics) and Meta (Meta Pixel and Conversions API), for our own website and dashboard only, as described above.

6. Facebook and Instagram data

When you connect a Facebook Page or Instagram account we use the permissions you grant only to list your Pages, receive messages sent to them and reply on your behalf. Page access tokens are stored on our servers and never shown in the browser. You can remove this access at any time:

• Disconnect the Page or Instagram account in your agent’s Channels page — this deletes the stored token; or
• Remove the app in Facebook → Settings & privacy → Settings → Business integrations; or
• Follow the steps on our data deletion page.

7. Retention and deletion

We keep your data while your account is active. You can delete sources, conversations, contacts or a whole agent from the dashboard at any time, and deleted items are removed from our active systems. To delete your account and all its data, contact us at our contact page. Backups are overwritten on a rolling basis.

8. Security

We use encrypted connections (HTTPS), hashed passwords, access controls and team roles to protect data. No online service can be completely secure, so please use a strong password and keep API keys private.

9. Your choices and rights

You can access, correct, export or delete your information by using the dashboard or by contacting us. Customers who chatted with a business can contact that business, or us, to request deletion of their messages.

You can accept or reject analytics and advertising cookies at any time with "Cookie settings" at the bottom of our website. In the EU, the UK and Switzerland they stay off until you accept them.

10. Children

The Service is intended for businesses and is not directed to children under 13.

11. Changes

We may update this policy from time to time. We will post the new version on this page and change the date above; significant changes will be announced in the dashboard or by email.

12. Contact

Questions about this policy? Contact AnytimeReply at our contact page.