GeniePrivacy Policy
Last updated: 22 October 2026
GenieReply is a WhatsApp auto-reply and customer management service for car dealers, operated by Geniereply ("we", "us"). This policy explains what personal data we handle, why, and the choices you have. It applies to our website, the GenieReply backend used by dealers, and the WhatsApp conversations GenieReply handles on dealers' behalf.
1. Who is responsible for your data
When you message a car dealer that uses GenieReply, that dealer decides how your data is used (under Malaysia's Personal Data Protection Act 2010 the dealer is the "data user"). We process those messages on the dealer's behalf to provide the service. For dealer staff accounts and our own website, we are responsible for the data.
2. Data we collect
- Customers who message a dealer on WhatsApp: WhatsApp phone number, WhatsApp profile name, the name you give us, the content of your messages, and details you share such as the car you're interested in, budget, trade-in car details and appointment date/time.
- Dealer staff: name, email address, role, a securely hashed password (we never store the actual password) and sign-in times.
- Dealers: business details (name, branches, opening hours, loan settings), car stock and photos, and the identifiers and access key of the dealer's WhatsApp Business account (the key is stored encrypted).
- Technical data: basic server logs (such as IP address and time of request) kept for security and troubleshooting.
3. How we use it
- To read customers' WhatsApp messages and reply automatically with stock information, prices, loan estimates and appointment bookings.
- To show dealer staff their leads, conversations, appointments and enquiries, and to let staff reply to customers.
- To sign staff in securely and keep each dealer's data separate.
- To keep the service secure, fix problems and improve how it works.
We do not sell personal data, and we do not use customers' messages for advertising.
4. Service providers we share data with
- Meta Platforms (WhatsApp Business Platform) — delivers WhatsApp messages between customers and dealers.
- Anthropic (Claude AI) — when a dealer has AI replies turned on, message content and the dealer's stock information are sent to Anthropic to generate a reply. Anthropic processes it under its commercial terms and does not use it to train its models.
- Railway — cloud hosting for our servers and database.
These providers may process data outside Malaysia. We only share what is needed for them to provide their service. We may also disclose data where required by law.
5. Cookies
Our website does not use advertising or tracking cookies. The dealer backend uses one essential cookie to keep staff signed in.
6. How long we keep data
We keep conversation and lead data for as long as the dealer's account is active, so the dealer can follow up with customers. Dealers can delete individual conversations at any time. When a dealer closes their account, we delete their data within 30 days, except where we must keep it longer by law.
7. Security
Data is sent over encrypted connections (HTTPS). Passwords are hashed, WhatsApp access keys are encrypted, every request is limited to one dealer's data, and access to the backend requires a personal sign-in.
8. Your rights
You may ask to access or correct your personal data, ask us to delete it, or withdraw your consent to us processing it. If you messaged a dealer, you can contact that dealer directly or contact us and we will pass your request on and help them respond. Contact: geniereply.my@gmail.com.
9. Data deletion
To have your data deleted:
- Customers: email geniereply.my@gmail.com from any address, include the WhatsApp phone number you used and the name of the dealer you messaged. We will delete your conversations, lead details and appointments for that dealer within 30 days and confirm by email.
- Dealers: remove your WhatsApp connection under Settings → WhatsApp → Disconnect, and email us to close your account. We delete your account data within 30 days.
- If you connected through Facebook / Meta: you can also remove GenieReply's access in your Meta Business settings (Business integrations), then email us to delete the related data.
10. Children
GenieReply is a business service and is not directed at children under 18.
11. Changes to this policy
We may update this policy. We'll change the "Last updated" date above, and tell dealers about significant changes.
12. Contact us
Geniereply
Email: geniereply.my@gmail.com