Rispora is a service that finds potential business customers and contacts them for you: it drafts messages with AI, sends them from accounts you connect, and tracks replies. This policy explains what we collect to do that, how it is used, and the choices you have. We keep it in plain language on purpose; if anything is unclear, ask us.
Who we are
Rispora (“we”) operates this website and the Rispora dashboard, and is the controller for the personal data described here. Contact: support@rispora.com.
What we collect
- Account and workspace. Your name, email address, a hashed (scrambled) password (or your Google sign-in identity), your role in a workspace, and workspace settings.
- Connected sending accounts. When you connect Gmail, an SMTP mailbox, or LinkedIn, we store the credentials or tokens needed to send on your behalf, encrypted where they are stored. We use them only to run the sends and reply-tracking you set up, and you can disconnect them at any time.
- Potential-customer data you find. When you launch a campaign, Rispora collects business contact information such as company names, business email addresses and phone numbers, websites, and public profile pages. It comes from public web pages and from a licensed business contact database (Apollo). If you connect a website visitor service (RB2B), it also sends us the name, business email, LinkedIn profile, and pages viewed of visitors it identifies on your site. This lives in your workspace and is yours to export or delete.
- Messages and replies. The drafts the AI writes, what you send, and replies from potential customers in connected inboxes that belong to follow-ups still in progress.
- Billing. Card payments are handled by our payment processor; we never store full card numbers. We keep your plan, usage against its limits, and invoice history.
- Usage. Logs, approximate location from your IP address, browser and device information, and the cookies described below.
How we use it
To run the product: find potential customers and fill in their contact details, draft and send messages, classify replies, stop the follow-ups when someone answers, track usage against your plan, bill you, provide support, and keep the service safe (rate limits, abuse prevention, and helping your emails reach inboxes instead of spam). We do not sell personal data and we do not run advertising.
AI processing
Your goal, campaign context, potential-customer details, and message content are processed by third-party AI services to generate drafts, plans, and reply classifications. We send only what is needed for the task, and we do not use your data to train models of our own.
Service providers
We share data with processors that help run the service, under contracts limiting use to providing it. They cover hosting and infrastructure, web search for finding potential customers (Serper), business contact data (Apollo, which receives company names and websites and returns business contact details), AI text generation (Google Gemini), and the email we send you about your account (Amazon Web Services). Calls and text messages go through Twilio. LinkedIn invites and messages go through Unipile, which holds the LinkedIn session you connect. We also use our card payment processor, website analytics (Google Analytics), and the services you choose to connect, for example Google for Gmail, Microsoft for Outlook, HubSpot or Salesforce for your CRM, and RB2B for website visitors. We can provide the current list on request.
If Rispora contacted you
If you received a message sent through Rispora, it came from one of our customers using their own sending accounts. We process business contact data on the basis of legitimate interest in relevant business-to-business contact. Replying with a no, or words to that effect, stops the follow-ups automatically. You can also email support@rispora.com with the email address or phone number we contacted. We will delete the records holding it from every Rispora workspace and put it on a do-not-contact list, so Rispora will not send email, texts, or calls to it again. If a customer copied your details into their own email or CRM, we will ask them to remove you.
Text message alerts
If you add a mobile number in Settings and turn on text alerts, we use that number only to send you Rispora account alerts about replies, meetings, opportunities and billing, and we record when you gave consent. Mobile numbers and text message consent are not shared with third parties or affiliates for marketing purposes. We share a number only with the text message provider that delivers the alerts, and only to deliver them. Reply STOP to any alert to stop them, or turn them off in Settings.
Retention
Account data is kept while your account is active. Potential-customer data, campaigns, and messages stay until you delete them or close your workspace; after closure we delete workspace data within 30 days, except records we must keep for billing or legal reasons. Routine logs are kept for shorter periods.
Security
Data is encrypted as it travels between you and us, connected-account credentials are encrypted where they are stored, and access to production data is restricted to what operating the service requires. No system is perfectly secure; if a breach affects you, we will tell you.
Your rights
You can access, correct, export, or delete your data: most of it directly in the dashboard (export of your leads, account settings), the rest by emailing us. Depending on where you live, you may also have legal rights to object to or restrict processing and to complain to a data protection authority.
International transfers
Our providers operate in multiple regions, so data may be processed outside your country. Where transfer rules apply, we rely on the safeguards our providers offer, such as standard contractual clauses.
Cookies and analytics
We use a session cookie to keep you signed in and local storage for preferences like dark mode.
We also use Google Analytics to understand how our website is used, for example which pages people arrive on and which of them lead to a sign-up. It sets its own cookies and records your approximate location from your IP address, along with browser and device information. We use it only on our public website, not on the dashboard you sign in to. We do not run advertising and we do not sell personal data.
We ask first. Nothing loads from Google until you accept the banner on your first visit, and saying no changes nothing about how the product works. The page addresses we send stop at the path, so whatever follows it, such as the code in a link we emailed you, never reaches Google.
You can also opt out with Google's browser add-on, or by blocking cookies in your browser.
Changes
If this policy changes in a way that matters, we will say so in the product or by email before it takes effect. See also our Terms of service and Acceptable use policy.