Privacy at ReplyNest
Last reviewed: 11 October 2026. ReplyNest is an early-stage project operated from Australia, inviting expressions of interest from online businesses worldwide. It is not yet a commercial support service for merchants.
Who is responsible?
The site is operated under the working name ReplyNest. Contact ReplyNest at getreplynest@gmail.com for beta enquiries, privacy requests, access, correction or deletion. The operator’s legal name and applicable business registration details still need to be confirmed and published before commercial launch or broad public promotion.
Information submitted
We collect the merchant or store name, contact name, email, country, ecommerce platform, optional website URL, optional message, and separate marketing opt-in choice. Do not submit credit card numbers, customer account details, orders, passwords or sensitive information.
Purpose and consent
We use form submissions solely to respond to enquiries and assess possible beta participation. Occasional product news is optional and requires a separate checkbox. We do not take payments, and a form submission creates no contractual purchase obligation.
Third parties and international processing
Form submissions are processed by Formspree and may be delivered to the operator's notification inbox. Data may be processed outside your country. Cloudflare serves the site and processes AI demonstration questions; see its privacy information.
Demo chatbot
Chat questions go to Cloudflare Workers AI to generate example answers based on fictional store policies. The service does not intentionally save demo chat content in its own application database. Do not enter personally identifying, confidential, payment or real-order information. The bot does not handle real orders or send messages to merchants.
Invited merchant pilot widget
The current invited pilot stores merchant-approved PUBLIC shop descriptions, shipping policies, returns policies, product notes and a public support contact in the Cloudflare D1 database. Each install URL contains a public store ID, not the secret owner management key. The published merchant facts can be seen by visitors to that widget. Server-side counts are used to enforce a per-store monthly question limit. The application does not intentionally store chat transcripts in its own D1 database. Questions and merchant-approved public facts are sent to Cloudflare Workers AI for processing. Do not submit personal, confidential, payment, login or order details in the chat. There is no real order access, payment processing, refund capability or shopper contact capture in the widget. A participating store remains responsible for its own consumer-facing privacy notice and installation choices.
Demonstration handover
The example support handover is entirely fictional and runs locally in your browser. It is never sent to the beta form or any merchant.
Merchant onboarding sandbox (development only)
If enabled for private technical testing, the ReplyNest merchant sandbox verifies ownership of a business email address using a one-time link sent through Resend and anti-abuse checks from Cloudflare Turnstile. The sandbox temporarily stores the email address, one-time token hashes (15-minute expiry), session token hashes (up to 7 days), request-rate counters, and public store policies in Cloudflare D1. Raw session and sign-in tokens are not stored in the database. For troubleshooting and security, hosting and email providers may process technical request metadata. Test Stripe subscriptions, payment method handling and billing records are processed in Stripe Sandbox only; never enter real payment details when using this test environment.
Sandbox merchant records may require manual deletion after testing; expired token rows are not automatically purged by this version. Merchant policy text is public to widget visitors when an active subscription allows access. The merchant remains responsible for the accuracy of those policies. Public registration will not be enabled until the email provider and anti-abuse verification are configured, and the operator verifies the current legal/privacy requirements.
Your rights and retention
We retain enquiries only while reasonably necessary to respond, evaluate the pilot, and comply with applicable obligations; Formspree settings also affect retention. You may request access, correction or deletion by emailing getreplynest@gmail.com. If you separately opted in to product emails, you can withdraw consent through a reply or unsubscribe mechanism provided in those emails. Jurisdiction-specific rights may apply.
Before commercial international launch: this notice and contact details require jurisdiction-specific legal/privacy review, especially where the GDPR or equivalent protections apply. Seller integrations and shopper-data collection are not currently offered.