Legal
Privacy
Notice
Version privacy-2026-08b · Last updated 10 August 2026
Who we are
Replicus operates this website, replic.us. If you have any question about this notice or about information we hold about you, email hello@replic.us.
What this notice covers
This notice covers this website only — including the demo request form on our SAFU page.
It does not cover data held inside the SAFU application itself. If your organisation uses SAFU, the handling of your permits, signatures, audit records and user accounts is governed by the agreement and data processing terms between Replicus and your organisation, not by this notice.
What we collect
Information you give us. When you submit the demo request form we collect your name, work email address, company, and — if you choose to provide them — your job title, the number of sites you are asking about, how you currently manage permits, and anything you write in the message field.
Technical information. We record the time of your request, the page you submitted it from, your browser's user agent string, and any campaign tags in the link you arrived through.
We do not store your IP address. We store a one-way cryptographic hash of it, which lets us detect automated abuse of the form but cannot be turned back into your IP address.
Cookies. This website does not use tracking or advertising cookies. Our bot-protection service runs a short-lived check in your browser to confirm a form submission is not automated.
Why we collect it, and our legal basis
We use this information for one purpose: to contact you about the demo you requested and to prepare for that conversation.
Our legal basis is your consent, which you give by ticking the consent box on the form. You can withdraw it at any time (see section 07).
We will not add you to a marketing mailing list on the basis of a demo request. If we ever want to send you marketing, we will ask you separately.
Who we share it with
We do not sell your information and we do not share it for advertising.
We use a small number of service providers who process this information on our behalf:
| Vercel | Website hosting, and bot protection on the form |
|---|---|
| Supabase | Database where form submissions are stored |
| Resend | Sending the notification and confirmation emails |
These providers may process data outside the country you are in. Where required, those transfers are covered by standard contractual clauses or an equivalent safeguard.
We may also disclose information where the law requires it.
How long we keep it
Demo request records are deleted 24 months after they are submitted. Deletion is automatic.
If we go on to do business with your organisation, any information we need beyond that point is held under our agreement with your organisation, not under this notice.
Your rights
You can ask us to:
- give you a copy of the information we hold about you
- correct anything that is wrong
- delete it
- stop using it, or withdraw the consent you gave
Email hello@replic.us and we will respond within 30 days. There is no charge.
Depending on where you live you may also have the right to complain to a data protection regulator — in the UK the Information Commissioner's Office, in Canada the Office of the Privacy Commissioner, and in the EU your national supervisory authority.
How we protect it
Information you submit is encrypted in transit. Access to stored form submissions is limited to the people at Replicus who need it to respond to you, and is protected by database-level access controls.
Changes
If we change this notice we will update the version and date at the top. The version in force when you submitted a form is recorded with your submission.