Privacy Policy

ReplyXa is a WhatsApp automation and business workflow platform operated by CeyCodex in Sri Lanka.

This Privacy Policy explains how information is collected, used, stored, and protected when businesses and their customers interact with ReplyXa.

Depending on how ReplyXa is used, we may process information such as:

• Account details such as name, email address, phone number, and role.
• Business and WhatsApp Business account configuration information.
• Customer names, phone numbers, and conversation identifiers.
• WhatsApp message content and message-related metadata.
• Orders, reservations, enquiries, and other workflow information.
• Workflow activity, delivery status, and operational records.
• Technical information needed for security, reliability, and troubleshooting.

We use information to provide and operate ReplyXa, including to:

• Connect businesses to the WhatsApp Business Platform.
• Receive, process, and respond to WhatsApp messages.
• Run configured workflows and business automations.
• Manage orders, reservations, customers, and conversations.
• Provide dashboards, operational records, and service functionality.
• Maintain security, prevent misuse, and troubleshoot technical issues.
• Comply with applicable legal and regulatory obligations.

Businesses that use ReplyXa may collect and process information about their own customers through WhatsApp.

In those situations, the business using ReplyXa determines how its customer information is used, while CeyCodex processes that information as necessary to provide ReplyXa, subject to applicable law and the relevant service relationship.

ReplyXa integrates with the official WhatsApp Business Platform, which is operated by Meta.

Information sent through WhatsApp may also be processed by Meta in accordance with Meta and WhatsApp policies, terms, and applicable agreements. ReplyXa does not control Meta's independent data processing practices.

We do not sell personal information.

Information may be shared only where reasonably necessary to operate the service, including with infrastructure, communications, security, or other service providers, or when required by law.

Information is retained for as long as reasonably necessary to provide ReplyXa, maintain legitimate business and security records, meet contractual requirements, and comply with applicable law.

Retention periods may vary depending on the type of information and the business using ReplyXa.

We use reasonable technical and organisational safeguards designed to protect information against unauthorised access, loss, alteration, disclosure, or misuse.

No internet-based service can guarantee absolute security, but we continuously work to maintain appropriate protections for the platform and its data.

Depending on applicable law and your relationship with ReplyXa, you may be able to request access to, correction of, or deletion of personal information associated with you.

If you are a customer of a business that uses ReplyXa, you may also need to contact that business directly because it may control the relevant customer information.

Requests relating to deletion of information can be made through the ReplyXa data deletion process.

A dedicated data deletion instructions page is available at replyxa.com/data-deletion.

ReplyXa is a business service and is not intended for use by children as an independent consumer service.

We may update this Privacy Policy when our services, legal obligations, or data practices change. The latest version will be published on this page with an updated effective date.

For privacy questions or requests relating to ReplyXa, contact CeyCodex using the contact details published on the ReplyXa website.

Website: replyxa.com