Privacy Policy

This is how we handle your data at Replicas. No surprises, no fine print tricks.

• We collect your email when you sign up. That is the only personal information we ask for.
• When the product launches, we will also collect your name, billing details (processed by Stripe, we never see your full card number), and usage data tied to your account.
• We use a small number of third-party services to operate: Supabase (authentication and database), Stripe (payments), Vercel (hosting), PostHog (product analytics), Sentry (error monitoring), Google Analytics (site analytics), and Axiom (server-side analytics for security monitoring and service operation). Each has their own privacy policy.
• Your data is stored in the United States on infrastructure provided by Supabase and Vercel. All data is encrypted at rest and in transit over HTTPS.
• We use analytics to understand how people use the site. Your IP address is anonymized before storage. We collect server-side usage metrics (such as response times and message counts, not message content) for security monitoring and service operation. We do not set first-party cookies. PostHog and Google Analytics set third-party cookies to track sessions, which you can block in your browser settings.
• We use your email to notify you when early access is ready and to send product updates. You can unsubscribe at any time.
• We do not sell, rent, or share your personal data with anyone for marketing purposes.
• We keep your email until launch or until you ask us to remove it. After launch, account data is retained while your account is active. If you delete your account, all associated data is permanently removed within 30 days.
• Your replica data (personas, responses, configurations, and research outputs) belongs to you. You can export or delete it at any time from your account.
• You have the right to access, correct, delete, or export your personal data. You also have the right to opt out of analytics tracking. Email us and we will respond within 30 days. We will not discriminate against you for exercising these rights.
• If a data breach affects your personal information, we will notify you by email within 72 hours of becoming aware.
• This site is not for anyone under 16. If we learn that a minor has signed up, we will delete their data immediately.
• If we update this policy, we will change the date at the top and notify you by email for material changes.