Privacy policy

Last updated 5 October 2026

Replaro ("we", "us") is a comment moderation service for Facebook and Instagram pages, operated by Azoela Solutions Ltd. This policy explains what data we process, why, and what rights you have. It applies to the website replaro.co and the Replaro application.

1. Who we are

Azoela Solutions Ltd is the data controller for account data and the data processor for the comment data we handle on your behalf. Replaro is a Meta-verified business. Contact: [email protected].

2. Data we collect

Account data. Your name, email address, password (stored only as a salted hash), company name, and login times.
Facebook connection data. When you connect through Facebook Login for Business we receive your Facebook user ID and name, the list of pages you manage, each page's ID, name and profile picture, the access Facebook grants Replaro for each page you choose, and, if you choose, the linked Instagram business account. Page access is stored encrypted.
Comment data. For each new comment on a connected page: the comment ID, text, time, the commenter's public name and ID as provided by Meta, the post text, and the parent comment when the comment is part of a thread.
Decision data. What Replaro decided (reply, hide, skip), the reply text, the reason, and what action was taken.
Billing data. Handled by Stripe. We store only the Stripe customer and subscription identifiers and your plan. We never see full card numbers.
Technical data. Server logs with IP address, browser type and timestamps, kept for security and debugging.
Advertising measurement data. When you arrive from one of our ads: the ad's campaign parameters, the click identifier of our ad-click measurement, Meta's click identifier and the time you arrived. If you sign up, these are saved with your account together with your country, IP address and browser, so we know which ad brought you.

3. Why we process it

To provide the service: managing the comments on your pages and their ads, replying and hiding as your page, and showing you the log.
To notify you about escalations, errors and billing events.
To secure the service, prevent abuse and comply with Meta Platform Terms.
To bill you for the plan you chose.
To measure which of our ads bring customers, and to show our ads to businesses likely to find Replaro useful. In the UK, the EEA and Switzerland we do this only with your consent.

4. Automated decisions and AI processing

Replaro uses artificial intelligence to sort comments and draft replies. Comment text, post text and your page configuration are processed for this purpose by AI service providers acting on our behalf under contract. We contractually require them not to use this data to train their models. You remain in control: every decision is visible in your log, you can operate in draft mode, and you can reverse any action.

5. Subprocessors

Cloud hosting and network protection providers.
AI service providers that process comment text on our behalf.
Payments: Stripe, Inc.
Transactional email: our email delivery provider.
Advertising measurement: Meta Platforms, through the Meta Conversions API, from server to server. There is no Meta pixel or other ad script on our website. When you sign up, connect your first page, start a trial or make a payment, Meta is told that it happened, with a hashed (unreadable) email address and account identifier, your IP address and browser, and Meta's own click and browser identifiers.
Ad-click measurement: the click-tracking service that runs our ad links. It records which ad a visit came from and which of those visits became customers (sign-up, first page connected, trial, payments, refunds and disputes, with their amounts), together with a hashed email address and account identifier, and passes those results on to Meta as described above.

Every subprocessor works under a written contract and may use your data only to provide its service to us. Account owners can request the current list of subprocessors by writing to [email protected].

6. Cookies and ad measurement

Cookies we always need: your session, the security check on forms, the workspace you are in, and your choice below. With your consent we also set measurement cookies on replaro.co: Meta's browser and click identifiers (_fbp, _fbc, 90 days), which our ad links or our own server set and only our server reads, and our own record of the ad you came from, including the click identifier of our ad-click measurement (rpl_attr, 90 days), and a random visitor number that lets us see which steps of our sign-up one visit went through (rpl_vid, 90 days). No ad platform's script runs on our pages. Visitors from the UK, the EEA and Switzerland are asked first, and until they accept nothing is set or sent about them: our server only counts which of our pages and sign-up steps were reached, with the ad they came from and the country, without any cookie or identifier, so a step before sign-up can never be linked to a person. Once you have an account, the steps you take in it (connecting a page, the free review, choosing a plan) are recorded with your account, like the rest of your account activity. Elsewhere measurement is on by default. Your choice is kept for 6 months in rpl_consent, and you can change it at any time: Cookie choices. Choosing "Only necessary" turns measurement off, and if you sign up after that, nothing about you is sent to Meta or the ad-click measurement service.

7. Retention

Comment and decision records are kept while the page is connected and for up to 12 months after disconnection, then deleted.
Replaro's access to a page is deleted immediately when you disconnect the page, remove the Replaro app from Facebook, or delete your account.
Account data is deleted within 30 days of account deletion, except what we must keep for tax and accounting law.
Copies of the new-comment notices we receive from Meta are kept for 30 days for reliability, then deleted.
Advertising measurement events are deleted after 180 days; the IP address and browser saved with your sign-up are removed after 180 days too.

8. Your rights

You can access, correct, export or delete your data, object to processing, or withdraw consent at any time by writing to [email protected] or from the dashboard. Facebook users may also trigger deletion through Facebook. See our data deletion instructions. If you are in the EU or EEA you may lodge a complaint with your local supervisory authority.

9. Security

All traffic is encrypted in transit. Page access is stored encrypted. Every notice from Meta is checked for authenticity before we act on it. Access to production systems is limited to authorised personnel with two-factor authentication.

10. Meta Platform Terms

Our use of data received from Meta complies with the Meta Platform Terms and Developer Policies. We only request the access needed to manage comments on the pages you choose and their ads, and we use that data solely to provide the service to the page's administrators. We never sell it.

11. Children

Replaro is a business tool and is not directed at children under 16.

12. Changes

We will post any changes to this policy on this page and, for material changes, notify account owners by email.