Sub-processors:
who handles your data, and where.
This is the list of companies that process data for ReplyKaro, with their purpose and location. It was last updated on 9 November 2026. We list a company here before it starts handling customer data.
Free plan, no card, no password needed · Last updated October 12, 2026
Verified by Meta as a Tech Provider · See proof- 1,000 DMs / month
- Free plan
- $3 / month
- Paid plans from
- Instagram login
- Connects via
- Never
- Password needed
Current sub-processors
| Provider | What it does | Location | Data it can receive | Your audience's data? |
|---|---|---|---|---|
| Supabase | Database and file storage | Sydney, Australia | Your account, automation settings, subscriber and lead lists, DM and interaction logs (kept 90 or 180 days), audience identifiers | Yes |
| Vercel | Hosting, serverless functions and CDN | United States (global edge network) | Request metadata and server logs; messages pass through while they are processed | Yes |
| Upstash | Cache, rate limits and job queue | United States | Session data, hashed frequency-cap keys and job references; short-lived (24 hours to 7 days) | Yes |
| OpenAI | AI replies, AI builder and knowledge search, only when you use these features | United States | The text needed for each AI request, such as the audience message, recent messages of the conversation and your instructions | Yes |
| Resend | Email delivery | United States | Your email address and the content of emails we send you; no audience data | No |
| Razorpay | Payment processing and invoices | India | Your billing details and payment amount; no audience data | No |
| Google Analytics | Website analytics on replykaro.com, loaded only after cookie consent | United States | Website visit data; no audience data | No |
Meta (Instagram, Facebook Messenger and WhatsApp) is not our sub-processor. It is the platform you connect, and it is a separate controller for the data it holds. ReplyKaro receives your audience's messages from Meta's official API only because you connected your account.
AI features are separate from the rest
OpenAI receives text only when a request needs it: an AI reply, an AI builder request, an AI follow-up or a knowledge-base search. For Facebook Messenger and WhatsApp, AI replies are off by default. For Instagram, the AI Sales Agent only runs after you enable it in AI Studio for that channel. You can switch AI off at any time and answer any chat yourself. Access tokens, passwords and payment details are never sent to OpenAI.
Changes to this list
If we add or replace a sub-processor that can receive your audience's data, customers with a Data Processing Addendum are told in advance by email and can object. Write to hello@replykaro.com to receive notices or to ask a question about a provider.
How long data is kept
- DM and interaction logs, including audience identifiers and the message text processed for automation: 90 days, then purged. Facebook message logs, flow history and activity logs: 180 days.
- Cache and queue data: 24 hours to 7 days.
- When you ask to delete your account: erased after a 7-day cooling-off period, during which you can cancel. Requests from Meta's data-deletion callback are processed immediately.
- Payment records: kept for 7 years under Indian tax rules, in anonymised form after deletion.
Full details are in the Privacy Policy.
What customers say on Trustpilot
78% 5-star · 22% 4-star · as of October 5, 2026
Indi website with a friendly UI and competitive prices. You can try their free version before commiting. The payment process is trustworthy (already finished one month subscription and upgraded to a yearly one)
Marion Getto · DE · Oct 3, 2026
I have been using for a few days now. Very smooth experience and very affordable plans. Same features are 30 times in other companies. Keep up the good work!! 👍
Ravinder Rawat · IN · Sep 23, 2026
It’s been pretty good I’ve been using it since two months. And they are very responsive when I reach out to them!
Hrithika · IN · Sep 20, 2026
Reviews are quoted as written by the reviewers. Read all on Trustpilot
Frequently asked questions
Does ReplyKaro have a Data Processing Agreement?
Yes, on request. Customers in the EU, UK or Switzerland can write to hello@replykaro.com to receive the Data Processing Addendum and the Standard Contractual Clauses for transfers outside the EEA.
Is Meta a sub-processor?
No. Meta is the platform you connect and a separate controller for the data it holds. We receive your audience's messages from Meta's official API because you connected your account.
Where is the data stored?
The main database is in Sydney, Australia. Hosting, cache and AI processing are in the United States. Payments are processed in India.
Is ReplyKaro safe for my Instagram account?
ReplyKaro uses Instagram's official API with Instagram login, never asks for your password and sends below Meta's hourly cap. ReplyKaro's business is verified by Meta as a Tech Provider. It only messages people who interacted with you. No tool can guarantee an account will never be restricted, so keep messages relevant.
How much does ReplyKaro cost?
There is a free plan (1 Instagram account, 3 active automations and 1,000 DMs a month). Paid plans start at ₹99 a month in India or $3 a month elsewhere, and Pro (₹299 (India) or $9 a month with unlimited automations and DMs) removes automation and DM caps. See the pricing page for every plan.
Do I need an Instagram Professional account?
Yes. Instagram only allows automation tools to message through Business or Creator accounts. Switching is free in Instagram settings.
Try ReplyKaro free
Connect your Instagram account and build a keyword automation in a few minutes. No card needed.