Privacy Policy

Rspond is operated by PT Baitech Inovasi Digital ("Rspond", "we", "us"), a company incorporated in Indonesia, which runs the messaging platform available at rspond.id. For businesses that connect a channel to Rspond, we act as a service provider (processor) that handles their customer conversations on their behalf and at their direction.

Contact: support@rspond.id.

Account & workspace data: your name, email, workspace name, team members and their roles.

Conversation data from connected channels: messages your customers send to your connected WhatsApp, Instagram, Telegram, or Web Chat, together with contact identifiers (e.g., phone number, username, display name), timestamps, and attachments, plus the replies sent by your bots/AI agent or human agents.

Business content you add: chatbot flows, AI-agent instructions, uploaded knowledge-base documents, product catalog, and message templates.

Billing data: subscription and payment records. Card/bank details are handled by our payment provider (DOKU) and are not stored by Rspond.

Usage & technical data: log data, feature usage, quota counters, and information needed to keep the service secure and reliable.

To provide the service: receive incoming messages, route them to your chatbot/AI agent, show them in your shared inbox, and send replies to your customers.

To generate AI replies: message content may be processed by AI providers to produce automated responses and to search your knowledge base.

To operate billing, send you service notifications, enforce quotas, and secure and improve the platform.

We do not sell your data, and we do not use your customers' message content for advertising.

When you connect a WhatsApp Business number or an Instagram Business account, Rspond receives and sends messages on your behalf solely to provide your shared inbox and automated replies.

We use this data only to operate the service for the business that connected the account. We handle Meta Platform data in accordance with the Meta Platform Terms and Developer Policies, and we do not share it with unauthorized third parties or use it for purposes other than providing the messaging service.

We rely on trusted providers to run Rspond, including: Supabase (database & authentication), Vercel (hosting), Anthropic and OpenAI (AI generation and embeddings), DOKU (payments), Resend (transactional email), Twilio (voice telephony), and Meta (WhatsApp/Instagram messaging).

These providers process data only as needed to deliver their part of the service and under their own terms and security commitments.

We keep conversation data for as long as needed to provide the service. Older conversations and orphaned contacts are automatically purged after a configurable retention period.

You can request earlier deletion at any time — see our Data Deletion page (/data-deletion).

Channel credentials (such as access tokens) are stored encrypted and are never exposed to the browser. Access to each workspace's data is isolated at the database level.

No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.

You can access and update your account and workspace information from within the app, disconnect any channel at any time, and request deletion of your data.

To delete your data, follow the steps on our Data Deletion page (/data-deletion) or email support@rspond.id.

Data may be processed in countries where we or our providers operate, with appropriate safeguards.

Rspond is a business tool and is not directed to children.

We may update this policy from time to time; material changes will be reflected on this page with a new "last updated" date.

Questions about this policy? Email support@rspond.id.