Privacy Policy

Last Updated: June 2026

Introduction

Welcome to ReLUfy. This Privacy Policy explains how we collect, use, and protect your information when you use our website, dashboard, and third-party integrations, including Google, WhatsApp, Facebook, and Instagram.

ReLUfy is built on a simple principle: privacy isn't a checkbox at the end of a sprint, it's a design constraint from the start. We are ISO 27001, ISO 27701, and ISO 42001 certified, and we apply the same data-handling discipline to every integration we support — including the WhatsApp Business Platform.

Data We Collect

Account Information: Email, name, and profile details to create and manage your ReLUfy dashboard account.

Google Business Profile Data: When connected, we collect your business location details (name, address, location ID) and public customer reviews (reviewer name, star rating, review text, and timestamps).

Meta Integrations (WhatsApp, Facebook, Instagram): Phone numbers, public profile names, and the content of messages, comments, or interactions processed through our platform. For WhatsApp specifically, this includes the guest's phone number, message text, message timestamps, and delivery/read status as provided by the WhatsApp Business Platform.

System Usage: Quota usage, timestamps, and access logs to maintain system health and security.

How We Use Your Data

Service Delivery: To sync, aggregate, and let you manage your Google reviews and Meta interactions, including WhatsApp conversations, from a centralized dashboard.

AI Processing: To provide intelligent, context-aware automated responses to guest messages and reviews, based on the workflows your property configures. ReLUfy's Ask module uses this data only to generate the responses you've configured; it is not used to train any model outside your environment.

Dashboard & Security: To secure your account, authenticate connections to third-party APIs, and provide personalized access to analytics.

Third-Party Integrations

Google Workspace APIs: ReLUfy integrates with the Google Business Profile API to provide review management. We may process anonymized, aggregated review text, stripped of personally identifiable information such as reviewer names, business names, and location data, to improve our internal analytics. We do not use this data to train generalized AI models, and we do not sell data to third parties.

Meta Platforms (WhatsApp, Instagram, Facebook): Our service connects to Meta's APIs, including the WhatsApp Business Platform, to send and receive messages on behalf of the businesses we serve. When you message a property using ReLUfy's WhatsApp integration, your message is transmitted through Meta's infrastructure and processed by ReLUfy to generate a response. By messaging a business through WhatsApp, you also agree to Meta's Privacy Policy.

We do not sell your personal data, or your customers' data, to third parties or advertisers. Your information is used solely to deliver the services you have explicitly requested.

Data Storage, Security, and Retention

Encryption: All data transmitted between your devices, our servers, and third-party APIs is encrypted using industry-standard TLS/SSL protocols.

Vault Systems: Sensitive credentials, OAuth tokens, and API keys are stored in encrypted vault systems with strict access controls.

Cloud Infrastructure: We use secure, enterprise-grade cloud infrastructure with multiple redundancy layers and regular security audits.

Data Retention: We retain your account information, integration tokens, and aggregated review and conversation data for as long as your account remains active, so you can view historical analytics. WhatsApp message content is retained only as long as needed to deliver the service and meet the legal/contractual obligations described below, after which it is deleted or anonymized.

Data Deletion Requests: You may request deletion of your personal data, or revoke third-party API access, at any time. We fulfill data deletion requests within 30 days, subject to legal and contractual obligations. See our [Data Deletion Policy] for how to submit a request.

Your Rights

Depending on your location, you may have rights under GDPR, KVKK, or other applicable data protection laws, including the right to access, correct, export, or delete your personal data, and the right to withdraw consent to messaging at any time by replying STOP or contacting the business directly.

Contact Us

For privacy inquiries, integration questions, or data deletion requests, contact us at privacy@relufy.com.