← Back to ReplyEngine

Privacy Policy

Last updated: March 16, 2026

This Privacy Policy describes how LUMETECH (doing business as ReplyEngine) ("we," "us," or "our") collects, uses, and shares your personal information when you use our website and mobile application (collectively, the "Services"). ReplyEngine is an AI-powered social media management tool that automatically responds to direct messages and comments on Instagram, Facebook, and LinkedIn on behalf of small businesses.

By using ReplyEngine, you agree to the collection and use of information in accordance with this Privacy Policy. If you have questions, contact us at hello@replyengine.ca.

1. Information We Collect

Information You Provide to Us

When you register for and use ReplyEngine, we may collect the following personal information:

Information Collected Automatically

When you use our Services, we automatically collect certain technical information including:

We use cookies and similar tracking technologies to collect this information. For more details, see our Cookie Policy at replyengine.ca/cookies.

Information from Third-Party Platforms

When you connect your Instagram, Facebook, or LinkedIn accounts to ReplyEngine, we access and process:

This information is used solely to provide the ReplyEngine service. We do not use your customers' messages for any purpose other than generating replies on your behalf.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

3. Legal Bases for Processing (Canada and International Users)

We process your personal information on the following legal bases:

For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

For users in the European Economic Area (EEA) or United Kingdom, we comply with the General Data Protection Regulation (GDPR) and UK GDPR. For US users, we comply with applicable state privacy laws including the California Consumer Privacy Act (CCPA).

4. Sharing Your Information

We do not sell your personal information to third parties. We may share your information with the following service providers who help us operate ReplyEngine:

Service Provider Purpose Location
Anthropic AI reply generation (Claude API) United States
Stripe Payment processing and billing United States
Supabase Database and infrastructure United States
Railway Cloud hosting and deployment United States
Twilio SMS hot lead alert notifications United States
Meta (Instagram/Facebook) Social account connection and messaging United States
LinkedIn Social account connection and messaging United States

All third-party providers are contractually required to protect your information and use it only for the purposes we specify. We may also disclose your information if required by law, court order, or government authority.

5. International Data Transfers

Our servers are located in Canada and the United States. If you are located outside of these countries, your information may be transferred to and processed in Canada and the United States. By using ReplyEngine, you consent to this transfer. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

6. AI Products and Processing

ReplyEngine uses artificial intelligence powered by Anthropic's Claude API to generate reply suggestions for your social media messages. When you use our AI features:

You may opt out of AI processing by cancelling your ReplyEngine subscription or contacting us at hello@replyengine.ca.

7. SMS Text Messaging

ReplyEngine operates a text messaging program called ReplyEngine Alerts. We send transactional SMS messages to notify you of high-intent customer interactions detected on your connected social media accounts.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Message and data rates may apply.

8. Cookies

We use cookies and similar tracking technologies to maintain the security of our Services, save your preferences, and assist with basic site functions. We also permit third-party service providers to use tracking technologies for analytics purposes. You can control cookies through your browser settings. For more information, visit our Cookie Policy at replyengine.ca/cookies.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. When you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, tax, or accounting purposes.

Message history and reply logs are retained for up to 12 months to enable weekly performance reports and analytics features.

10. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure database storage via Supabase, access controls and authentication, and regular security monitoring.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Children's Privacy

ReplyEngine is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at hello@replyengine.ca and we will delete it promptly.

12. Your Privacy Rights

Canadian Users (PIPEDA)

Under PIPEDA and applicable provincial privacy laws, you have the right to:

EEA and UK Users (GDPR)

If you are located in the EEA or UK, you also have the right to data portability, the right to restrict processing, and the right to object to processing. You may lodge a complaint with your local data protection authority.

US Users (CCPA and State Laws)

If you are a California resident or resident of another US state with applicable privacy laws, you have the right to know what personal information we collect, the right to delete your information, the right to opt out of the sale of your information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, visit replyengine.ca/privacy-request or email us at hello@replyengine.ca.

13. Social Media Logins

ReplyEngine allows you to connect your existing social media accounts (Instagram, Facebook, LinkedIn). When you connect these accounts, we receive certain profile information and access tokens from those platforms. We use this information only to provide the ReplyEngine service. Please review the privacy policies of each platform to understand how they handle your data.

14. Do Not Track

Some browsers include a Do Not Track (DNT) feature. Currently, there is no uniform standard for recognizing DNT signals, so we do not respond to them at this time. If a standard is adopted in the future, we will update this policy accordingly.

15. Third-Party Links

Our Services may contain links to third-party websites that are not operated by us. We have no control over the content or privacy practices of these sites and are not responsible for them. We encourage you to review the privacy policy of every site you visit.

16. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at hello@replyengine.ca at least 30 days before the changes take effect. The updated policy will be posted at replyengine.ca/privacy with a new "Last updated" date. Your continued use of ReplyEngine after the effective date constitutes acceptance of the updated policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

For privacy requests, visit: replyengine.ca/privacy-request