Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains how ReplyLoop ("we", "us", "our"), operated by MG AI MEDIA RESOURCES (SSM Registration No: AS0510898-A), collects, uses and protects information when you use our website, the ReplyLoop application and Atlas AI (together, the "Service").

Atlas AI is an AI product provided by ReplyLoop and operated by MG AI MEDIA RESOURCES. Atlas AI is currently in private testing and is being prepared for early access.

1. Who this policy applies to

ReplyLoop is a business-to-business service. Our customers are businesses that use the Service to communicate with their own customers on WhatsApp. This policy covers:

• Businesses and their users — the people who register for, manage or use a ReplyLoop account.
• Customers of those businesses — the people who message a business that uses ReplyLoop, whose conversation data we process on that business's behalf.
• Website visitors — people who visit replyloop.my or request early access.

2. Information we collect

• Account information — your name, email address, phone number and business details when you register for the Service or request early access.
• Messaging data — when a business connects its WhatsApp Business Account to the Service, we process the data described in Section 3 to deliver the features that business has configured.
• Business content — information a business provides for Atlas AI to use, such as product, service, pricing and booking details, and the replies and message templates it sets up.
• Usage data — basic technical information such as device type, browser, log data and how you interact with the Service, used to operate, secure and improve it.

3. Meta and WhatsApp Platform Data

ReplyLoop integrates with the official WhatsApp Business Platform (Cloud API). Businesses authorize their own WhatsApp Business Account through Meta's official onboarding and authorization process. After a business authorizes this connection, we may process the following data received through the WhatsApp Business Platform, to the extent necessary to provide the Service:

• WhatsApp Business Account identifiers
• the business phone number and Phone Number ID
• customer or contact identifiers, such as WhatsApp phone numbers and profile names
• message content
• conversation metadata, such as timestamps
• message delivery and status information
• other data provided through the WhatsApp Business Platform that is necessary to operate the features the business has requested

Where enabled and configured for a business, we may use this data to:

• receive and display the business's conversations
• send automated replies and follow-ups the business has configured, in line with WhatsApp's messaging rules
• generate AI-assisted replies, where Atlas AI is enabled
• route conversations, including handing a conversation over to a human team member
• deliver messages and track their status
• provide reporting and operate the Service
• maintain security, troubleshoot problems and comply with legal and platform requirements

We do not:

• sell Meta or WhatsApp Platform Data
• use customer message content for advertising
• use WhatsApp customer conversations to train a general-purpose AI model
• use Platform Data for purposes unrelated to providing and securing the Service requested by the business

4. Roles and responsibilities

Businesses determine how and why their customer conversations are handled. ReplyLoop generally processes customer messaging data on behalf of the business in order to provide the requested services. ReplyLoop may also process certain data for its own purposes, such as account administration, security, fraud prevention and operating the Service.

Customers of a business should normally direct privacy or deletion requests concerning their conversation with that business to the relevant business. ReplyLoop will assist the business with appropriate data requests where applicable.

5. AI processing

Atlas AI currently uses the OpenAI API for AI processing. When Atlas AI features are enabled, relevant portions of message content and conversation context may be transmitted to OpenAI, our AI processing service provider, solely for the purpose of generating or supporting the requested AI-powered response. OpenAI processes this information according to its applicable business/API privacy and data processing terms.

AI-generated responses may be inaccurate or incomplete. Businesses remain responsible for reviewing and using AI-generated responses sent through their account.

6. Service providers

We use the following service providers to operate the Service. They process data only as needed to provide their services to us, and subject to their own terms:

• Cloudflare — website and frontend hosting, content delivery and security infrastructure
• Render — backend application hosting
• Supabase — database and application data infrastructure
• OpenAI — AI processing for Atlas AI

These providers may process or store data in countries outside Malaysia. We may also disclose information if required by law or to protect our legal rights. We do not sell personal data to third parties.

7. Data retention and deletion

We retain data only for as long as a business's account is active or as needed to provide the Service, comply with legal obligations, resolve disputes and maintain security. Once a WhatsApp Business Account disconnection has been completed and taken effect, ReplyLoop will no longer intentionally receive new messaging data from that account through the Service.

Businesses and users may request deletion of their account data and associated WhatsApp Platform Data at any time. See our Data Deletion page for how to make a request and what happens next.

8. Data security

We use reasonable technical and organisational measures to protect data, including encrypted connections and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Under the Personal Data Protection Act 2010 (Malaysia) and other applicable laws, you may have rights to access and correct your personal data, withdraw consent to certain processing, object to certain uses, and request deletion or cessation of processing where applicable. To exercise these rights, contact us using the details below. If your request concerns a conversation with a business that uses ReplyLoop, please also contact that business directly (see Section 4).

10. Third-party platforms

The Service integrates with WhatsApp and Facebook, which are operated by Meta Platforms, Inc. Your use of those platforms is governed by their own terms and privacy policies. ReplyLoop and Atlas AI are not affiliated with, endorsed by, or sponsored by WhatsApp LLC, Meta Platforms, Inc. or OpenAI.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date shown above.

12. Contact us

If you have any questions about this Privacy Policy or your data, contact us:

• Email: hello@replyloop.my
• Phone: +60 17-365 5965
• MG AI MEDIA RESOURCES (SSM Registration No: AS0510898-A), Johor Bahru, Johor, Malaysia