Built for Singapore regulations & Meta standards.
ReplySG ensures full compliance with Singapore's Personal Data Protection Act (PDPA), MOH healthcare guidelines, and official Meta WhatsApp Cloud API policies.
Built for medical rules, not retail
MOH-licensed clinics only
We do not work with beauty salons or spas.
Checked against HCSA and SMC rules
Every message is reviewed before it is sent.
PDPA compliant
Patient data stays yours. We never sell it.
You own your number and your data
Leave any time and take it all with you.
Singapore PDPA & Spam Control Act
Singapore mandates strict guidelines on business-to-consumer messaging. ReplySG automates consent verification and Do-Not-Call (DNC) registry checks before initiating any outgoing campaign.
All customer conversations record timestamped PDPA consent upon initial inquiry or waitlist submission.
Customers can reply "STOP" or "UNSUBSCRIBE" at any time to immediately block further automated communications.
Customer phone numbers, booking details, and PayNow verification records are encrypted in transit and at rest.
Data processing routes through secure Asia-Pacific enterprise infrastructure compliant with local privacy laws.
MOH Healthcare Services Act (HCSA) Compliance
Aesthetic clinics, dental practices, and medical service providers in Singapore are subject to strict Ministry of Health (MOH) advertising regulations. ReplySG AI models are pre-filtered to prevent unauthorized medical claims.
Pre-Approved Clinical AI Playbooks
AI responses are strictly constrained to factual clinic details (pricing, opening hours, practitioner credentials, location, pre-treatment instructions) without making disallowed medical outcome guarantees.
Secure PayNow UEN Deposit Collection
Deposit transactions use direct PayNow UEN verification or official payment gateway links. Patient financial data is never exposed or logged insecurely.
Patient Confidentiality & Triage
Sensitive medical queries are flagged automatically and seamlessly routed to human clinic administrators for review.
HCSA-Compliant Review Requests
Automated review requests strictly follow MOH guidelines regarding patient feedback and Google Review generation.
Meta WhatsApp Business Cloud API Standards
Unapproved WhatsApp automation tools risk permanent phone number bans. ReplySG integrates through official Meta Cloud API endpoints using verified business accounts.
Free-form AI conversations operate strictly within Meta's 24-hour messaging window triggered by customer inquiries.
Outbound appointment reminders, invoices, and review requests use pre-approved Meta message templates.
Displays your official business name, address, website, and verification badge directly inside WhatsApp.
Data Protection Policy
This policy explains what personal data ReplySG collects, why we collect it, how we keep it safe, how long we keep it, and how you can reach us about your data.
We do not collect or own patient data
ReplySG acts as a data intermediary. Your business owns your customer and patient data at all times. We only process and transmit it on your behalf to run your automations. We never claim ownership, and you can export or delete your data at any time. You are never locked in.
What we collect
The only data we collect directly from you is your waitlist application: full name, business name, WhatsApp number, email address, industry, average weekly WhatsApp enquiries, and your stated pain points. We do not collect, store, or own your customers' or patients' personal data. Customer messages, booking details, and payment confirmations flow through our platform to deliver your automations, but they remain your data and your responsibility.
Why we collect it
Waitlist data is used solely to assess fit, plan your automation, and contact you about your application. Customer and patient data that passes through the platform is processed only to deliver the WhatsApp automation service you signed up for, such as replying to enquiries, booking appointments, collecting deposits, sending reminders, invoices, and review requests. We do not use your customers' data for any other purpose.
How we protect it
All data is encrypted in transit using TLS. Access is restricted to authorised personnel on a strict need-to-know basis. We do not sell or share personal data with third parties for marketing. All processing aligns with Singapore's Personal Data Protection Act (PDPA), and our role as a data intermediary is governed by a written agreement with each client.
How long we keep it
Waitlist data is kept for up to 12 months after your last interaction, then deleted unless you become a client. Customer and patient data that passes through the platform is retained only for as long as your subscription is active, and for up to 90 days after cancellation to allow for wind-down. After that it is securely deleted or returned to you on request, unless retention is required by law.
How to contact us
To access, correct, or request deletion of your personal data, or to ask any question about how we handle your information, message us on WhatsApp.
Ready to automate your WhatsApp
100% legally and safely?
Join the waitlist today. We only take on 10 new businesses this year, because we build every automation by hand for your specific needs.