Privacy Policy

Replora ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform. By creating an account, you agree to the practices described in this policy.

This policy applies to all users of Replora, including therapists and mental health professionals operating in India.

We collect the following information when you use Replora:

• Account Information — Your full name and email address when you create an account.
• Client Data — Information about your clients that you choose to enter into the platform, such as names, contact details, and session notes.
• WhatsApp Integration Data — When you connect WhatsApp, we access message data solely to enable communication features within the platform. This is done only after your explicit authorisation.
• Usage Data — Basic usage patterns and interaction logs to improve platform performance and your experience.

We use the information we collect solely to:

• Create and manage your Replora account
• Provide and operate the platform features you use
• Enable WhatsApp integration when you authorise it
• Send transactional emails such as account verification and security alerts
• Improve platform performance and fix issues
• Respond to your support requests

We do not use your data for advertising, profiling, or any purpose beyond operating and improving Replora.

We do not sell, rent, or share your personal data with third parties for marketing or any commercial purpose.

We use the following infrastructure providers strictly to operate the platform:

• Supabase — Secure database and authentication infrastructure.
• WhatsApp Business API (Meta) — Only when you explicitly connect your WhatsApp number.
• Groq API — Real-time AI inference to understand patient messages and generate appropriate replies. Groq is used solely for inference; it does not retain, sell, or use your data to train any AI or machine learning model. See the Groq Privacy Policy for details.
• Razorpay — Payment processing for subscription billing. No patient data is shared with Razorpay.
• Resend — Transactional email delivery (e.g. account alerts, renewal notices).

These providers are bound by their own privacy policies and are used only as necessary to deliver Replora's services. We do not sell or rent your data to any third party.

Replora offers an optional Google Calendar integration so practitioners can sync their appointment schedule and prevent double bookings. We take our obligations under the Google API Services User Data Policy very seriously.

Compliance with Google API Services User Data Policy: Replora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we guarantee the following:

• No AI / ML Model Training: Google user data — including raw, aggregated, or derived data obtained from Google Calendar APIs — is never used, transferred, or sold to train, fine-tune, or improve any generalized AI or machine learning model, including large language models (LLMs).
• AI Inference is Isolated from Google Data: Replora uses the Groq API for AI-powered message understanding. Google Calendar data is never included in prompts sent to Groq. Calendar data is accessed and used in a separate, isolated code path solely to check free/busy availability and create calendar events. Groq only processes anonymised patient conversation context, which contains no Google Workspace data. Furthermore, Groq's own Privacy Policy confirms: “By default, Groq does not retain customer inputs or outputs for the purpose of training its models.”
• Purpose-Limited Access: Google Calendar data is accessed only in real-time to check practitioner availability and create or delete session events on the practitioner's behalf. It is never stored permanently outside of Google's own systems.
• Minimum Scope: We request only the calendar.events scope required to create and delete calendar events on behalf of the practitioner. We do not request access to emails, contacts, or any other Google Workspace data.
• Token Security & Revocation: OAuth tokens are encrypted at rest and in transit. Practitioners can disconnect their Google Calendar at any time from the Replora dashboard, which immediately and permanently deletes all stored authentication tokens.

We take the security of your data seriously. All data is encrypted in transit using TLS and at rest using industry-standard encryption. Access to your data is strictly limited and controlled.

While we take all reasonable precautions, no system is completely secure. In the event of a data breach that affects your rights, we will notify you promptly in accordance with applicable law.

We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where retention is required by law. Client data you have entered will also be deleted upon account deletion.

Under applicable Indian data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing at any time
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at replora.info@gmail.com.

Replora uses strictly necessary cookies to maintain your login session and remember your onboarding progress. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

Replora is intended for use by licensed professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you by email if the changes are significant. Continued use of Replora after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at replora.info@gmail.com. We will respond within 7 business days.