Privacy & Data Architecture
This document explains exactly how data flows through Replora, where it is stored, how credentials are encrypted, and how AI inference operates. We prioritize transparency over marketing claims.
1. Message Content & Database Storage
Incoming WhatsApp messages and receptionist replies are stored in our PostgreSQL database hosted on Supabase. This includes message content, timestamps, customer phone numbers, and conversation status.
Every data table is partitioned and strictly queried with tenant scoping (by your practice's organization_id), preventing cross-tenant data access.
2. Meta WhatsApp Access Token Encryption
When you connect your WhatsApp Business account, sensitive credentials—including your Meta Cloud API permanent system access token—are encrypted at rest using libsodium cryptography before being written to the database.
Plaintext tokens are never stored in raw form or logged into console outputs. They are decrypted only in memory during authenticated API calls to Meta.
3. Redis Queue & Message Debouncing
When a patient sends multiple WhatsApp messages in rapid succession (e.g., "Hi", "Are you open Friday?"), our backend buffers them for 5 seconds using Redis and BullMQ so the AI responds to the complete message context.
Redis stores job metadata and identifiers only (jobId, organizationId, customerPhone, and conversationId). Message body text is not persisted in Redis cache and jobs are automatically cleared upon execution.
4. AI Inference via Groq
To formulate natural language replies and extract scheduling intents, our background worker sends the recent conversation context and your practice FAQs to the Groq API (using Llama 3 models).
This transmission is strictly for real-time inference processing. Patient messages are not used to train public foundational AI models.
5. Compliance Boundaries & Certifications
Replora is an administrative practice management and appointment coordination tool. We do not hold third-party healthcare certifications (such as HIPAA Business Associate Agreements or ISO 27001 certifications).
Practitioners should configure Replora exclusively for scheduling, booking logistics, and practice fee questions. Clinical intake assessments and confidential diagnostic notes should be managed within your primary clinical electronic records system.
6. Data Retention, Export & Deletion Requests
You retain ownership of your practice data. You may request an export of your messages or permanent deletion of your organization records at any time.