Privacy Policy

How Replico AI collects, uses, stores and protects information — including information received through authorized CRM integrations.

Effective date: August 1, 2026
Last updated: August 17, 2026
Applies to: replicoai.com and the Replico AI platform

01Introduction

Replico AI ("Replico", "we", "us"), a company based in India, provides an intelligence and automation layer for real estate businesses. Replico is currently in private development and pilot testing.

This Privacy Policy explains how we handle information in connection with the Replico AI website and platform (the "Service").

Replico will comply with applicable Indian data protection and privacy requirements, including the Digital Personal Data Protection Act, 2023, and will assess additional privacy obligations that may apply based on the jurisdictions in which its customers and users operate. Because Replico may serve real estate businesses outside India, including in the United States, additional privacy requirements may apply depending on customer and user location and on the information processed.

This policy covers two different relationships. When you visit our website or contact us directly, we determine how your information is handled. When a business customer connects a CRM integration, that customer determines the purpose of the processing and we process the information on their behalf, as described in section 11.

02Information We Collect

Information you provide

  • Contact details you send us through the website contact form or by email — name, email address, company name, and the content of your message.
  • Account information if you are given access to the Replico platform, such as your name, work email address and assigned role.

Information collected automatically

  • Basic technical information generated when the Service is used, such as IP address, browser and device type, pages viewed, timestamps and error events.

We do not ask for and do not require government identifiers, financial account numbers, or health information in order to use the Service.

03Information Received Through CRM Integrations

When a customer connects a CRM integration, Replico may process information from that CRM on the customer's behalf. The customer chooses which system to connect and can disconnect it at any time.

Depending on the integration and features used, Replico may process:

  • Lead information
  • Contact information
  • Agent and team member information
  • CRM activities
  • Tasks
  • Appointments
  • Other CRM information authorized through an integration

Not every category is processed in every deployment. Replico requests access only to the information required for the features a customer uses, and the categories available depend on what the connected CRM and the customer's authorization permit.

Connecting an integration also involves credentials or access tokens issued by the CRM platform. These are handled server-side and are not exposed in the browser.

04How We Use Information

We use information to:

  • Provide, operate, maintain and support the Service.
  • Analyse authorized CRM activity in order to identify leads, follow-ups and operational situations that may require attention.
  • Generate recommendations for review by the customer's team.
  • Create approved follow-up tasks in a connected CRM after a person has approved them.
  • Maintain records of important system actions.
  • Respond to enquiries and communicate about the Service.
  • Monitor, debug and secure the Service.
  • Comply with applicable legal obligations.

We do not sell personal information, and we do not share one customer's information with another customer.

05AI Processing

Artificial intelligence is part of the Replico product architecture. Replico may process relevant business and CRM information through AI services in order to generate analysis, prioritization, recommendations and operational insights.

This means that information from a connected CRM may be transmitted to third-party AI providers acting as service providers to Replico. The handling, storage and retention of that information by those providers is governed by the terms and configuration of each provider. We do not make representations on their behalf about whether they retain or train on data; provider terms and settings are reviewed as part of our service-provider process, and we will describe those arrangements here as they are finalized.

AI output is advisory. Recommendations are presented for human review and do not change CRM records on their own.

06Data Storage

Information processed by the Service is stored using third-party hosting and database infrastructure engaged by Replico. Replico stores the information required to operate the Service, which may include normalized CRM records used for analysis, generated recommendations, approval decisions and records of system actions.

Infrastructure locations are described in section 13. Final production storage arrangements will be confirmed before general customer availability.

07Data Security

Replico is designed to protect business information through secure data transmission and appropriate access controls, and to require human approval before CRM tasks are created. Our current approach is summarised on the security page.

Replico is in private development and pilot testing, and its production security program is still being developed. Replico does not hold SOC 2, ISO 27001, HIPAA, GDPR or CCPA certification and does not claim any such certification. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

08Third-Party Service Providers

We engage third-party providers to operate the Service. These may include cloud hosting and database providers, AI model providers, email delivery providers and error-monitoring providers.

Providers receive only the information needed to perform their function and are expected to handle it in accordance with their agreements with us. A current list of service providers is available on request at info@replicoai.com.

We may also disclose information where required by applicable law, to enforce our agreements, or to protect the rights, safety and property of Replico, our customers or others.

09Data Retention

Replico may retain information for as long as reasonably necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.

Specific production retention and deletion periods will be finalized before general customer availability.

10Data Deletion

A customer may disconnect a CRM integration at any time, which stops further retrieval of information from that system. Disconnecting does not remove records already created inside the customer's CRM, because those records belong to the customer's CRM and remain under the customer's control.

A customer may request deletion of the information Replico holds on their behalf by contacting info@replicoai.com. We will action verified deletion requests within a reasonable period, except where we are required to retain specific records by applicable law. Residual copies may persist in backups until those backups expire on their normal cycle.

11Customer Data

Where Replico processes CRM information on behalf of a business customer, that customer is responsible for the information in their CRM and for the instructions they give us. The customer's CRM remains their system of record.

The customer is responsible for:

  • Having the rights and any necessary consents to connect their CRM to Replico.
  • Determining which team members may access Replico and approve actions.
  • Responding to requests from their own contacts and leads about those individuals' information.

If an individual whose information appears in a customer's CRM contacts us directly, we will generally refer that request to the relevant customer.

12Cookies and Analytics

This website does not currently use a third-party analytics or advertising platform, and does not set advertising or tracking cookies. The website uses your browser's session storage for a single functional purpose: remembering that you have dismissed an on-page message during your visit.

The website loads fonts from Google Fonts, which means your browser contacts Google's servers and Google may receive your IP address and basic request information as part of delivering those files.

If we introduce analytics in the future, we will update this section to name the provider before it is enabled.

13International Data Transfers

Replico may use infrastructure and service providers located in India, the United States, and other jurisdictions. Where information is transferred internationally, Replico will use appropriate safeguards required by applicable law.

The specific providers, locations and safeguards applicable to production deployments will be confirmed before general customer availability.

14User Rights

Depending on where you are located and the law that applies, you may have rights in relation to your personal information. These may include the right to request access to it, correction of inaccurate information, erasure, and to withdraw a consent you have given, together with the right to raise a grievance with us.

To exercise a right, contact info@replicoai.com. We may need to verify your identity before responding. Where Replico holds information on behalf of a business customer, we will direct your request to that customer.

Rights and remedies available to individuals in India are governed by applicable Indian law, including the Digital Personal Data Protection Act, 2023. Individuals located elsewhere may have rights under the laws applicable to them.

15Changes to This Policy

We may update this Privacy Policy as the Service develops. When we do, we will revise the "Last updated" date at the top of this page. If a change is material, we will take reasonable steps to notify affected customers.

16Contact

For questions about this Privacy Policy or about how Replico handles information, contact us:

Related pages: Terms of Service · Security · Lofty Integration

These documents are preliminary private-beta policies and should be reviewed by qualified legal counsel before general customer availability.