Privacy policy

Last updated 11 September 2026

Replaro ("we", "us") is a comment moderation service for Facebook and Instagram pages, operated by Azoela Solutions Ltd. This policy explains what data we process, why, and what rights you have. It applies to the website replaro.co and the Replaro application.

1. Who we are

Azoela Solutions Ltd is the data controller for account data and the data processor for the comment data we handle on your behalf. Contact: [email protected].

2. Data we collect

• Account data. Your name, email address, password (stored only as a salted hash), company name, and login times.
• Facebook connection data. When you connect through Facebook Login for Business we receive your Facebook user ID and name, the list of pages you manage, each page's ID, name, profile picture and a page access token, and, if you choose, the linked Instagram business account. Tokens are encrypted at rest.
• Comment data. For each new comment on a connected page: the comment ID, text, time, the commenter's public name and ID as provided by Meta, the post text, and the parent comment when the comment is part of a thread.
• Decision data. What Replaro decided (reply, hide, skip), the reply text, the reason, and what action was taken.
• Billing data. Handled by Stripe. We store only the Stripe customer and subscription identifiers and your plan. We never see full card numbers.
• Technical data. Server logs with IP address, browser type and timestamps, kept for security and debugging.

3. Why we process it

• To provide the service: reading comments on your pages, deciding, replying and hiding as your page, and showing you the log.
• To notify you about escalations, errors and billing events.
• To secure the service, prevent abuse and comply with Meta Platform Terms.
• To bill you for the plan you chose.

4. Automated decisions and AI processing

Replaro uses large language models to classify comments and draft replies. Comment text, post text and your page configuration are sent to our AI providers for processing. We contractually require our providers not to use this data to train their models. You remain in control: every decision is visible in your log, you can operate in draft mode, and you can reverse any action.

5. Subprocessors

6. Retention

• Comment and decision records are kept while the page is connected and for up to 12 months after disconnection, then deleted.
• Page access tokens are deleted immediately when you disconnect a page, remove the Replaro app from Facebook, or delete your account.
• Account data is deleted within 30 days of account deletion, except what we must keep for tax and accounting law.
• Raw webhook deliveries are kept for 30 days for reliability and replay, then deleted.

7. Your rights

You can access, correct, export or delete your data, object to processing, or withdraw consent at any time by writing to [email protected] or from the dashboard. Facebook users may also trigger deletion through Facebook. See our data deletion instructions. If you are in the EU or EEA you may lodge a complaint with your local supervisory authority.

8. Security

All traffic is encrypted in transit. Access tokens are encrypted at rest. Webhook payloads are verified with Meta's signature before processing. Access to production systems is limited to authorised personnel with two-factor authentication.

9. Meta Platform Terms

Our use of data received from Meta complies with the Meta Platform Terms and Developer Policies. We only request the permissions needed to list pages, read comments, reply to and hide comments and receive comment notifications, and we use that data solely to provide the service to the page's administrators.

10. Children

Replaro is a business tool and is not directed at children under 16.

11. Changes

We will post any changes to this policy on this page and, for material changes, notify account owners by email.