Privacy policy
Last updated 2026-08-27
Replayfy is operated by AppifyCommerce. This policy covers two different relationships, and it is worth separating them because our obligations differ.
1. Data we control: our own customers
When you sign up we hold your email address, your name if you give one, your hashed password, your workspace and team membership, your billing state, and a record of the actions you take in the product. We use it to run your account, to bill you, to answer your support requests, and to send you service messages such as a quota notice. Our lawful basis is the contract between us.
We do not sell it, do not use it to train models, and do not share it with advertising networks.
2. Data we process on your behalf: your visitors
When you install our recorder on your site, you decide what is recorded and why. In that relationship you are the controller and we are your processor, acting only on your instructions. The terms of that are in our data processing addendum, which forms part of our agreement with you.
What the recorder captures:
- Changes to the page's structure, so the page can be replayed
- Mouse movement, clicks and scrolling
- The fact that an input changed — never the value
- Page addresses, with sensitive parameters replaced before storage
- The referring page, the browser's user-agent string, viewport size, and the country the request came from
- JavaScript error messages (no stack traces)
What it never captures:
- Anything typed into any field, including hidden fields
- Any page whose address is a checkout page
- IP addresses — the country is derived at the edge and the address discarded
- Anything inside an element the site owner has marked as blocked
There are no cookies and no persistent identifier. A session identifier lives in the browser tab's own storage and dies with the tab, so we cannot recognise a returning visitor.
3. Retention
Recordings are deleted when their retention window ends — set by the site owner, up to their plan's ceiling. A nightly job enforces it and a storage-level expiry sits behind that as a backstop. Account data is kept while the account exists and deleted within 30 days of closure, except where we must keep an invoice for tax purposes.
Our audit log is kept for two years, deliberately longer than the recordings it describes.
4. Where it is stored
On Cloudflare's network, in accounts we control. See our sub-processor list for everyone involved and what each one does.
5. Your rights
If you are one of our customers, write to us and we will give you a copy of what we hold, correct it, or delete it. If you are a visitor to a site that uses Replayfy, your request belongs with that site's owner — they decide what is collected and we act on their instruction. Tell us anyway and we will pass it on and help them action it.
Site owners: any single recording, and every recording associated with one visitor identifier, can be deleted from the dashboard immediately.