Privacy Policy
This policy explains what data we collect when you use RepletoryReach, why we collect it, who we share it with, and how you can ask us to delete it.
Last updated: 2026-05-18
Who we are
RepletoryReach is a product of SJM Innovations Tech (Pty) Ltd, a company registered in South Africa. We are the data processor for the messages you send through our platform; you (the organisation that signs up) are the data controller for those messages. We are the data controller for your account information.
What we collect
- Account information: name, email, organisation name, role.
- Authentication metadata: sign-in events, IP address at sign-in, browser fingerprint.
- Usage data: number of messages sent, conversation counts, feature usage.
- Billing data: wallet balance, top-up history, payment-provider transaction IDs (never card numbers).
- Operational logs: error traces, latency metrics, anonymised request samples.
- Your content, only as needed to operate the platform; never used to train models without explicit consent.
Why we collect it
To operate the service you signed up for, bill you accurately, secure the platform against abuse, comply with our legal obligations, and improve the product. We never sell personal data.
Who we share it with
- Sub-processors that operate our service: our cloud hosting provider (data centres in South Africa), Meta Platforms for WhatsApp, and our payment providers.
- Law-enforcement when compelled by a valid order in a jurisdiction we operate in.
- Your authorised admins within your organisation.
How long we keep it
Account information for as long as your account is active, plus 12 months after closure for financial and dispute resolution. Operational logs are rotated after 90 days. Customer message content is retained according to your organisation's retention setting; the default is 24 months.
Your rights
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to fix anything that is inaccurate.
- Deletion: ask us to remove your personal information, subject to legal retention windows.
- Objection: object to a particular processing activity, including marketing communications.
- Complaint, lodge a complaint with the Information Regulator (South Africa) or the equivalent in your country.
How to contact us
Email privacy@repletoryreach.com. We respond within one business day for South African requests and within ten business days for international ones.