Who We Are
BizReply is a product of CBIS (Crysolite Business Intelligence Services). We provide automated customer response services for businesses via WhatsApp and Instagram.
Contact us at info@crysolite.co.uk.
What Data We Collect
When you message a business that uses BizReply, we may collect:
- Your WhatsApp messages or Instagram DMs sent to that business
- Your name (as shown on your messaging profile)
- Your phone number (WhatsApp) or Instagram handle
- Your email address, if you provide it during the conversation
- Conversation history with that business
Why We Collect It
We process your data to provide automated customer response services on behalf of the business you are messaging. This includes:
- Answering your enquiries quickly and accurately
- Routing your conversation to the right person on the business's team
- Helping the business follow up on your enquiry
We act as a data processor on behalf of the business (the data controller). We do not use your data for our own marketing or sell it to anyone.
Who Sees Your Data
- The business whose WhatsApp or Instagram account you messaged. They are the data controller and decide how your enquiry is handled.
- CBIS (BizReply), as the service provider operating the automated response system on behalf of that business.
Third-Party Services
- Meta (WhatsApp and Instagram platforms) -- your messages are transmitted through their infrastructure under their own privacy policies.
- OpenRouter (AI processing) -- message content may be processed by AI language models to generate responses. No personal data is stored by OpenRouter after processing.
How Long We Keep Your Data
We retain conversation data for 12 months after your last activity with the business. After that, your data is permanently deleted from our systems.
Instagram-Specific Disclosures
For businesses connected via Instagram, we only access Instagram Direct Messages through the official Instagram Messaging API. We do not access:
- Your followers or following lists
- Post analytics or insights
- Comments on posts
- Account settings or profile information beyond your display name
Your Rights (NDPA 2023)
Under the Nigeria Data Protection Act 2023, you have the right to:
- Access -- request a copy of the data we hold about you
- Correction -- ask us to correct inaccurate data
- Deletion -- ask us to delete your data at any time
- Object -- object to the processing of your data
To exercise any of these rights, email info@crysolite.co.uk and we will respond within 30 days.
Cookies
This website does not use cookies or any tracking technologies.
Changes to This Policy
We may update this policy from time to time. The latest version will always be available at this page.
Last updated: April 2026