The fine print
Privacy Policy
Last updated October 11, 2026
Data we process
Account data includes names, email addresses, password hashes, workspace settings and team roles. Chat data includes messages, attachments, knowledge articles and details visitors submit. The widget may record page URLs, referrers, device and browser details, IP addresses, approximate location and visit history.
Why we process it
We use this data to provide chat and AI features, identify returning visitors, route messages, produce reports, secure accounts, respond to support requests and administer subscriptions. We do not sell personal data or use chat content for advertising.
Workspace responsibilities
Workspace operators decide what visitor data to collect and are responsible for appropriate notices, consent and lawful use. ReplyOnSite processes that chat data to provide the service. For account and service administration data, ReplyOnSite determines how it is used.
Service providers and AI
Railway hosts the application and Cloudflare provides domain and network services. Transactional email may be delivered through SMTP2GO, which receives recipient addresses and message content such as invitations, account notices and requested transcripts. AI features send relevant chat context and knowledge content to the configured model provider; the current provider is DeepSeek. AI processing occurs when a workspace enables the bot or an agent uses an AI action. If you do not want content processed by AI, disable the bot and do not use AI actions. Provider processing may take place outside your country.
Payments
When enabled, Paddle processes checkout, recurring payments, taxes and billing records as merchant of record. We receive subscription identifiers, payment status and billing-period information. Card details entered in Paddle checkout are handled by Paddle rather than stored in our application.
Retention and requests
We retain data needed to operate your workspace, provide support, secure the service and meet legal obligations. Contact support to request access, correction, export or deletion. We may verify identity and retain records where required by law or necessary for security and dispute handling. Backup copies may remain until replaced under the applicable storage process.
Cookies and security
We use signed sessions and visitor identifiers to authenticate users and restore chats. See /legal/cookies for details. Passwords are hashed and access is scoped to workspaces. No online service can guarantee absolute security.
Contact and updates
Use /contact for privacy requests, questions or complaints. Workspace visitors should also contact the operator of the website where they used chat. We will update this notice when our processing changes.
Questions? Email [email protected] or contact ReplyOnSite support. View pricing · Refund policy
Service operator: Online Creative Network.