Get started

Security and privacy

How we protect your account, your Instagram and Facebook connections, and your data.

Last updated: October 19, 2026

Instagram and Facebook

Replier is a Meta-verified Tech Provider and connects to Instagram and Facebook only through Meta’s official API, with permissions Meta reviewed and approved.

Meta

Verified by Meta

Tech Provider

  • No browser automation or unofficial bots
  • We never ask for or store your Instagram or Facebook password
  • Instagram and Facebook access tokens are encrypted with a key kept outside our database, so anyone who gets into the database, our team included, can’t use them to act on your account
  • Follows Meta’s Platform Terms and messaging rules
  • Remove Replier in your Instagram or Facebook settings anytime

How we protect your data

Replier runs on Cloudflare, and your data is stored in a PlanetScale database in the AWS Tokyo region. PlanetScale is independently audited for SOC 1 and SOC 2 Type 2.

  • Every connection is encrypted with TLS, and the database and its backups are encrypted at rest
  • The database is backed up automatically and can be restored if needed
  • Cloudflare blocks DDoS attacks
  • We monitor Replier around the clock, and you can check its status at status.usereplier.com
PlanetScale security and compliance

Privacy and your rights

We collect only what Replier needs to run your automations and billing. We don’t sell your data.

  • Export your contacts and interactions as CSV
  • Disconnect a channel anytime, or delete your account in Account > Security
  • Request deletion of a channel’s data on our Data Deletion page
  • Analytics and ad measurement run only with your consent, and you can change it in Cookie settings

How we use AI

We don’t use your data to train AI models.

  • Suggest similar keywords sends only the keywords you typed, and adds a suggestion only when you pick it
  • Your automations send only the replies and DMs you saved
  • Claude or ChatGPT can reach your workspace only after you connect it, and you can revoke it anytime in Account > AI connections

More safeguards

Protected sign-in

Sign-in is handled by Clerk and supports two-step verification and passkeys. We ask you to confirm it’s you before you change these settings. In Account > Security you can see every signed-in device and sign out any you don’t recognize.

Team roles

In Studio, each member’s role decides who can connect channels, edit automations, or view analytics. Owners and admins can see who changed what in the audit log.

Secure payments

Payments are handled by Stripe, certified as a PCI Service Provider Level 1, the strictest level in the payments industry. Your card details go straight to Stripe and are stored only there. They never pass through Replier and are never stored in Replier’s database.

Security questions

Yes. Replier is a Meta-verified Tech Provider and uses only Meta’s official API, with no browser automation and no password sharing. That carries less risk than unofficial bots, though no tool can rule out a Meta restriction entirely.

Send the DM you keep copy-pasting.

Start free trial