Privacy Policy

1. Introduction

Respondly ("we", "us", or "our") is operated by Respondly, Mumbai, India. This Privacy Policy explains how we collect, use, store, and share information when you use our service at respondly.co.in (the "Service"). By using Respondly, you agree to the practices described in this policy.

2. Information We Collect

2a. Google Account Information

When you sign in with Google, we receive your name, email address, and Google Account ID via Google OAuth 2.0. We also receive OAuth tokens (access token and refresh token) that allow us to act on your behalf within the Google Business Profile API.

2b. Google Business Profile Data

With your explicit permission, we access your Google Business Profile accounts and locations to read customer reviews and post reply comments on your behalf. This requires the https://www.googleapis.com/auth/business.manage scope. We only read and write data necessary to operate the reply feature.

2c. Payment Information

Subscription payments are processed by Razorpay. We do not store your card number, CVV, or other payment credentials. We receive and store your subscription plan, status, and renewal dates from Razorpay webhooks.

2d. Usage Data

We may log API requests, error events, and general usage patterns (e.g., number of replies generated) to operate and improve the Service. These logs do not contain the text of customer reviews or generated replies beyond what is needed for debugging.

3. How We Use Your Information

• To authenticate you and maintain your session securely.
• To fetch your Google Business Profile reviews and display them inside your dashboard.
• To generate AI-written reply drafts using Anthropic's Claude API. The review text and your business name are sent to Anthropic's API; we do not send any personally identifiable information beyond what is contained in the review itself.
• To post your approved reply to Google Business Profile via the Google API.
• To manage your subscription and process payments via Razorpay.
• To send transactional emails related to your account (if applicable).

4. Third-Party Services

We share data with the following third parties to operate the Service:

We do not sell your data to any third party, and we do not use your data for advertising purposes.

5. Google API Scopes & Limited Use

Respondly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve the review-reply features described in this policy.
• We do not transfer Google user data to third parties except as necessary to provide the Service (e.g., sending review text to the Claude API to generate a reply).
• We do not use Google user data for advertising, and we do not allow humans to read your Google data unless you have given explicit permission or it is required for security or legal compliance.

6. Data Storage & Retention

Your account and subscription data is stored in Supabase (hosted on AWS in the closest available region). OAuth tokens are stored in an encrypted session cookie on your browser using iron-session and are not persisted to our database.

We retain your account data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law (e.g., payment records).

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Revoke Google OAuth access at any time via Google Account Permissions.

To exercise any of these rights, email us at support@respondly.co.in.

8. Security

We use industry-standard measures including HTTPS, encrypted session cookies, and server-side secret management via environment variables. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but are committed to protecting your data.

9. Children's Privacy

Respondly is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

For any privacy-related questions or requests, contact us at: