Privacy Policy

This Privacy Policy explains how r3ply.ai LLC, a Florida limited liability company doing business as r3ply.ai (“r3ply,” “we,” “us”), handles information about you when you visit r3ply.ai, book a consult, or use our services.

It applies to visitors of this site and to clients whose AI clones we build and operate. It does not apply to third-party sites or platforms we link to or publish your content on — those have their own policies.

Information you give us

• Contact and business details — name, email, phone number, company name, website, social handles, and whatever you tell us on a booking form, in the chat widget, or on a call.
• Production materials — video, audio, photos, brand assets, scripts, product and offer information, and written direction you send us.
• Billing information — handled by Stripe. We see the last four digits, card brand, and billing country. We never receive or store full card numbers.
• Account connections — access tokens for the social accounts you authorize us to publish to.

Information we generate

• Biometric identifiers — a faceprint and a voiceprint derived from your footage and audio, plus the trained AI models built from them. See section 3.
• Generated content — the video, audio, images, and copy we produce for you, and the approval history around it.

Information collected automatically

• Usage data — IP address, browser and device type, referring page, pages viewed, and timestamps, collected through server logs and analytics.
• Cookies and similar technologies — see section 7.

We do not intentionally collect government IDs, Social Security numbers, health information, or precise geolocation. Please don’t send them to us.

Building an AI clone requires processing biometric identifiers: a faceprint derived from your footage and a voiceprint derived from your audio. Several states, including Illinois, Texas, and Washington, regulate this specifically. Here’s our commitment.

• Consent. We collect biometric identifiers only from clients who have knowingly agreed in writing, by accepting our Terms of Service and filming with us. We do not collect biometrics from site visitors.
• Purpose. We use them for one thing: producing content for you under your engagement. Nothing else.
• No sale, no trade. We do not sell, lease, trade, or otherwise profit from your biometric identifiers, and we do not use them to train general-purpose models or to produce content for anyone else.
• Disclosure. We share them only with the generation providers listed in section 5, which are contractually limited to processing them on our instructions, and only where the law or a court order requires it.
• Storage. They’re stored encrypted in transit and at rest, with access limited to people who need it to do the work.
• Deletion. We delete your faceprint, voiceprint, trained models, and source recordings within 30 days of your written request — see section 8.

We use the information above to:

• Build, train, and operate your AI clone.
• Produce, review, schedule, and publish your content.
• Set up your account, take payment, and handle billing.
• Communicate with you — answer questions, send approvals, share updates about your engagement.
• Respond to consult requests and follow up on inquiries you started with us.
• Understand how the site is used so we can improve it, in aggregate.
• Keep the services secure, prevent abuse, and debug problems.
• Meet our legal, tax, and accounting obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

We share information with service providers who process it on our behalf, under contracts that limit them to that purpose:

• AI generation — HeyGen (video and avatar), ElevenLabs (voice), and Anthropic (text and scripting). These receive your production materials and, for the first two, your biometric identifiers.
• Hosting and infrastructure — Vercel (site hosting), Supabase (application database), Google Workspace and Google Drive (file storage and email).
• Payments — Stripe.
• Scheduling, chat, CRM, and SMS — LeadConnector / HighLevel, which powers the consult booking widget, the chat widget on this site, and text message delivery, together with its underlying messaging carriers.
• Publishing — the social platforms you connect, which receive the content we publish for you under their own terms.

We may also disclose information:

• When the law requires it — a subpoena, court order, or valid government request.
• To protect our rights, safety, or property, or to investigate fraud or abuse.
• In a merger, acquisition, financing, or sale of assets. If that happens, we’ll notify clients, and biometric data will not transfer without fresh consent.
• To anyone else, with your permission.

Your materials are processed by third-party AI systems to generate content. We configure these services, where the provider offers the option, so that your data is not used to train their public models.

We can’t guarantee any provider’s internal practices, so we keep the list in section 5 current and will tell active clients before adding a provider that receives biometric data.

We use a small number of cookies and similar technologies:

• Strictly necessary — needed for the site to work and stay secure.
• Analytics — aggregate traffic and performance data so we can see what’s working. This does not identify you personally.
• Third-party widgets — the booking and chat widgets set their own cookies under LeadConnector’s privacy policy.

You can block or delete cookies in your browser settings; parts of the site may stop working properly if you do. We do not currently respond to Do Not Track signals, as there’s no agreed standard, but we do honor Global Privacy Control signals where required by law.

• Biometric identifiers and trained models — kept while you’re a client, so we can keep producing your content. Deleted within 30 days of your written request, at any time, during or after the engagement.
• Source footage and production materials — kept for the duration of the engagement and deleted alongside your models on request.
• Generated content — yours; we keep our copies for the engagement and a reasonable period after, unless you ask us to delete them.
• Contact and inquiry records — kept up to 24 months after last contact, then deleted.
• Billing and tax records — kept as long as the law requires, typically seven years. These contain no biometric data.
• Backups — deleted data may persist in encrypted backups until they expire on their normal rotation, and is never used to restore a deleted clone.

We use encryption in transit and at rest, access controls, and reputable infrastructure providers, and we limit access to production data to people who need it.

No system is perfectly secure, and we can’t guarantee absolute security. If a breach affects your personal information, we’ll notify you and any required authorities as the law requires.

If you give us your mobile number, we use it to text you about scheduling, appointment reminders, your content and account, and replies to conversations you started with us — and, if you separately opt in, occasional marketing messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors that provide support services, such as customer service and message delivery, is permitted solely so we can send you the messages you asked for. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not sell, rent, or trade your mobile number or your messaging consent. Your opt-in is never transferred to another business, including in a merger or sale of assets, without fresh consent from you.

Text STOP to any message to opt out, or HELP for help. Message frequency varies, and message and data rates may apply. The full messaging terms are in section 12 of our Terms.

We keep records of your opt-in and opt-out — the number, the date, and how consent was given — for as long as you’re subscribed and for a reasonable period after, because messaging regulations require us to be able to prove consent.

Wherever you are, you can ask us to:

• Tell you what information we hold about you and how we use it.
• Correct anything that’s wrong.
• Delete your information, including your clone and biometric data.
• Send you a copy of your data in a portable format.
• Stop sending you marketing email — every one has an unsubscribe link.

California residents

Under the CCPA/CPRA you have the right to know, delete, correct, and opt out of sale or sharing, and the right not to be discriminated against for exercising them. We do not sell or share personal information, so there is nothing to opt out of. You may use an authorized agent to make a request.

EEA and UK residents

You have the rights to access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. Our legal bases for processing are: performance of a contract (delivering the services), your explicit consent (biometric data, which is special category data), legitimate interests (security, improving the site), and legal obligation (tax and accounting). You can withdraw consent at any time; doing so ends our ability to keep producing your content.

How to exercise a right

Email julian@r3ply.ai. We’ll verify your identity and respond within 30 days, or 45 where the law allows an extension and we tell you why. It’s free unless a request is excessive or repetitive.

The services are for businesses and are not directed at anyone under 18. We don’t knowingly collect information from children. If you believe a child gave us information, email us and we’ll delete it.

We operate in the United States and our providers are largely US-based. If you use the services from outside the US, your information will be transferred to and processed in the US, where privacy laws differ from those where you live. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

We may update this policy. The “last updated” date at the top reflects the current version. If a change materially affects how we handle your personal information — especially biometric data — we’ll notify active clients by email before it takes effect.

Privacy questions, or to make a request:

r3ply.ai LLC (d/b/a r3ply.ai)
17001 Collins Ave, Apt 4505
Sunny Isles Beach, FL 33160, USA
julian@r3ply.ai