Legal
Subprocessors
Last updated 5 August 2026
Every third party that can touch data in Replim, what it does, and what it receives. If a provider is not on this list, it does not have your data.
Current subprocessors
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Dodo Payments | Payments and invoicing, as merchant of record | Name, email, billing address, payment details. Card data never reaches Replim. | Global |
| OpenAI | Classifying comments and drafting suggested replies | Comment text and author display name. | United States |
| Composio | Authorising and reading your connected social accounts | OAuth tokens and the comment data returned by each platform. | United States |
| Zoho Mail | Sending sign-in codes and account email | Name and email address. | Depends on your Zoho data centre |
| Hostinger | Hosting the application and database | All application data at rest. | European Union |
Changes to this list
We will give notice before adding a subprocessor that processes customer data. Under the Data Processing Addendum you may object on reasonable data protection grounds.
The most significant entry here is the AI provider: comment text leaves our systems to be classified and drafted against. If that is unacceptable for your data, the AI features are the part of Replim to avoid.
Analytics
There is no third-party analytics or advertising tracker on this product. The landing page holds a small event buffer that is not sent anywhere unless an analytics provider is connected later, and comment text is never included in it.
Contact
Questions about this document go to [email protected]. Anything about personal data goes to [email protected].