Privacy Policy

Last updated: July 25, 2026.

This policy explains what data Camilius collects, why, and how it's stored. The service is currently operated by Mihajlo Savovic as an individual (note: this will be updated if the service is registered as a company).

Contact

For any privacy questions or data access/deletion requests, write to: support@ai-auto-reply-mail.com

What data we collect

From the business owner, at registration:

• Business name and password (the password is stored hashed, never in readable form)
• A contact email address, used only for account recovery (password resets) and important account notices
• The working hours, price list, and FAQ you enter

Every account also gets a hosted public page with a built-in chat and booking widget (and, optionally, the same widget embedded on a business's own site). When a visitor chats there, we store the message content and a random, anonymous session identifier generated by their own browser - not tied to any account of theirs - so the conversation has memory and, if they book an appointment, so it can be found again later. We don't require or collect a visitor's name, email, or phone number to use the chat.

Why we collect this data

Solely to provide the service's function: automatically reading customer inquiries sent via your hosted page or an embedded widget, and generating and sending replies based on your business's data. Replies are always sent immediately, since a visitor is waiting live for an answer - there is no manual review step.

Who we share data with

We don't sell your data. To provide the service, certain data is processed through the following external services (data processors):

• OpenAI - the text of your customer's question and your business data (working hours, price list, FAQ) are sent to OpenAI to generate suggested replies.
• Resend - used to send account-related emails (e.g. password resets); processes your contact email address.
• Railway - our hosting provider; all data is physically stored on their servers (outside Serbia).

How we store data

Dashboard login passwords are stored hashed (irreversibly). All communication with the site goes over HTTPS. That said, no system is 100% secure, and we can't guarantee absolute security.

How long we keep data

We keep your data for as long as your account exists. If you'd like your account and all associated data deleted, send a request to the contact email above.

Cookies

We use only one necessary (session) cookie to keep you logged into the dashboard. The public page's chat widget also stores a random, anonymous session identifier in your browser's local storage (not a cookie) so it can remember an ongoing conversation - this never leaves your browser except to key that same conversation on our server. We don't use cookies or local storage for marketing or tracking.

Your rights

You have the right to request access to the data we hold about you, its correction, or its complete deletion. For any of these requests, write to the contact email above - we'll respond within a reasonable time.

Changes to this policy

This policy may be updated from time to time. We'll try to notify users of significant changes via email.