Rispora is a service that finds potential business customers and contacts them for you: it drafts messages with AI, sends them from accounts you connect, and tracks replies. This policy explains what we collect to do that, how it is used, and the choices you have. We keep it in plain language on purpose; if anything is unclear, ask us.
Who we are
Rispora (“we”) operates this website and the Rispora dashboard, and is the controller for the personal data described here. Contact: support@rispora.com.
What we collect
- Account and workspace. Your name, email address, a hashed (scrambled) password (or your Google sign-in identity), your role in a workspace, and workspace settings.
- Connected sending accounts. When you connect Gmail, an SMTP mailbox, LinkedIn, or WhatsApp, we store the credentials or tokens needed to send on your behalf, encrypted where they are stored. We use them only to run the sends and reply-tracking you set up, and you can disconnect them at any time.
- Potential-customer data you find. When you launch a campaign, Rispora collects business contact information from public web sources: company names, business email addresses and phone numbers, websites, and public profile pages. This lives in your workspace and is yours to export or delete.
- Messages and replies. The drafts the AI writes, what you send, and replies from potential customers in connected inboxes that belong to follow-ups still in progress.
- Billing. Card payments are handled by our payment processor; we never store full card numbers. We keep your plan, usage against its limits, and invoice history.
- Usage. Logs, approximate location from your IP address, browser and device information, and the cookies described below.
How we use it
To run the product: find potential customers and fill in their contact details, draft and send messages, classify replies, stop the follow-ups when someone answers, track usage against your plan, bill you, provide support, and keep the service safe (rate limits, abuse prevention, and helping your emails reach inboxes instead of spam). We do not sell personal data and we do not run advertising.
AI processing
Your goal, campaign context, potential-customer details, and message content are processed by third-party AI services to generate drafts, plans, and reply classifications. We send only what is needed for the task, and we do not use your data to train models of our own.
Service providers
We share data with processors that help run the service, under contracts limiting use to providing it: hosting and infrastructure, web search for finding potential customers (Serper), AI text generation (Google Gemini), our card payment processor, website analytics (Google Analytics), and the channel providers you choose to connect (for example Google for Gmail, Meta for WhatsApp). We can provide the current list on request.
If Rispora contacted you
If you received a message sent through Rispora, it came from one of our customers using their own sending accounts. We process business contact data on the basis of legitimate interest in relevant business-to-business contact. Replying with a no, or words to that effect, stops the follow-ups automatically. You can also email support@rispora.com and we will put your address on a do-not-contact list and ask the customer to remove you.
Retention
Account data is kept while your account is active. Potential-customer data, campaigns, and messages stay until you delete them or close your workspace; after closure we delete workspace data within 30 days, except records we must keep for billing or legal reasons. Routine logs are kept for shorter periods.
Security
Data is encrypted as it travels between you and us, connected-account credentials are encrypted where they are stored, and access to production data is restricted to what operating the service requires. No system is perfectly secure; if a breach affects you, we will tell you.
Your rights
You can access, correct, export, or delete your data: most of it directly in the dashboard (export of your leads, account settings), the rest by emailing us. Depending on where you live, you may also have legal rights to object to or restrict processing and to complain to a data protection authority.
International transfers
Our providers operate in multiple regions, so data may be processed outside your country. Where transfer rules apply, we rely on the safeguards our providers offer, such as standard contractual clauses.
Cookies and analytics
We use a session cookie to keep you signed in and local storage for preferences like dark mode.
We also use Google Analytics to understand how our website is used, for example which pages people arrive on and which of them lead to a sign-up. It sets its own cookies and records your approximate location from your IP address, along with browser and device information. We use it only to measure our own site. We do not run advertising and we do not sell personal data.
You can opt out with Google's browser add-on, or by blocking cookies in your browser. Neither affects your use of the product.
Changes
If this policy changes in a way that matters, we will say so in the product or by email before it takes effect. See also our Terms of service and Acceptable use policy.