Legal

Privacy Policy

Last updated: May 26, 2026

Replay ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Replay app.

1

Information We Collect

  • Instagram account information: Your Instagram username and account ID, collected when you connect your Instagram account to Replay.
  • Saved content: URLs of Instagram reels and posts that you choose to share to our bot account (@replayapphq) via Instagram Direct Message.
  • Message metadata: Sender ID and timestamp of messages sent to our bot account. We do not store the full content of your DMs — only the URLs of content you intentionally share.
2

How We Use Your Information

  • To save and organize Instagram reels and posts you share to @replayapphq
  • To display your saved content in your personal Replay library
  • To send you confirmation messages when content is saved successfully
  • To generate AI-powered categories and tags for your saved content
  • To enable semantic search across your saved content
3

Instagram Data

Replay uses Instagram's official API (Meta Platform) to receive messages sent to our bot account. We access Instagram data only through Meta's approved API and in compliance with Meta's Platform Terms. We use the following Instagram permissions:

  • instagram_business_basic: To verify your Instagram account identity during onboarding
  • instagram_business_manage_messages: To receive and respond to Direct Messages sent to our bot account (@replayapphq)

We do not access your Instagram followers, following list, profile photos, stories, or any content beyond what you explicitly share to our bot account.

4

Data Storage

Your data is stored securely in our database hosted on Supabase. We use industry-standard encryption for data in transit and at rest. We do not sell your data to third parties.

5

Third-Party Services

Replay uses the following third-party services:

  • Meta / Instagram API: For receiving messages and verifying accounts
  • Google Gemini API: For AI-powered content categorization and search
  • Supabase: For secure data storage
  • Railway: For backend hosting
6

Data Retention

We retain your saved content and account information for as long as your account is active. You may request deletion of your data at any time by contacting us or using our data deletion request form.

7

Your Rights

You have the right to:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect your Instagram account from Replay at any time
8

Children's Privacy

Replay is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

9

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page.

10

Contact Us

Questions about this Privacy Policy? Email us at mhaskeaashish16@gmail.com