Privacy Policy

1. Who we are

ResponsiveMe (“ResponsiveMe”, “we”, “us”) provides an AI-assisted workspace for professional communication, spreadsheets (Excel Studio), reporting (BI Studio), and automation. This policy explains what personal data we process when you use responsiveme.com and the ResponsiveMe application, why we process it, who we share it with, and the rights you have over it.

2. What we collect

Account data: name, email address, password (stored as a salted hash, never in plain text), and profile details you add.

Content you create: messages, prompts, and content submitted for AI generation; saved responses; workbooks and spreadsheet data (Excel Studio); reports, datasets, and dashboards (BI Studio); automation workflow configurations and run history.

Workspace data: workspace membership, roles, invitations, and workspace-level activity you or your teammates generate.

Billing data: subscription plan, status, and usage counters. Card and payment details are collected and stored by Paddle, our payment processor and Merchant of Record — ResponsiveMe never receives or stores your full card number.

Technical data: IP address (stored only as an irreversible one-way hash, never in plain text), browser/device family, timestamps, and security-relevant events (sign-in, failed authentication attempts, rate-limit triggers).

Third-party connections you authorize: if you connect Power BI, we store an encrypted (AES-256-GCM) access/refresh token so the connection can keep working — never your Microsoft password.

3. Why we process it (legal basis)

To provide the service you signed up for and perform our contract with you (account creation, generation, saving, billing); for our legitimate interests in operating, securing, and improving the service (fraud/abuse prevention, rate limiting, product analytics); to comply with legal obligations (tax and accounting records for payments); and, where you’ve given it, your consent (e.g. connecting a third-party calendar, or opting in to product update emails).

4. AI processing — read this before you paste anything in

When you use a generation feature, the relevant content (your prompt, and any context the feature explicitly shows you it’s using) is sent to whichever AI provider is configured for your account — OpenAI and/or Anthropic. Do not submit passwords, full payment card numbers, government identity numbers, health records, or any information you are not personally authorized to share. Neither OpenAI nor Anthropic is instructed by us to use your prompts to train their foundation models under our commercial API agreements with them, but you should independently review each provider’s own API data-usage terms if this matters for your use case.

5. Who we share data with

We do not sell your personal information. We share data only with the service providers (“processors”) that are necessary to run ResponsiveMe, each acting under its own data-processing terms with us:

• Supabase — database, authentication, and file storage (all product data lives here).
• OpenAI and Anthropic — AI generation providers (see §4).
• Paddle — billing, subscriptions, tax, and invoicing, as our Merchant of Record.
• Resend — transactional email (workspace invitations).
• Microsoft — only if and when you explicitly connect a Power BI integration.
• Vercel — application hosting and edge network.

We may also disclose data if required by law, to protect the rights and safety of ResponsiveMe or our users, or in connection with a merger, acquisition, or sale of assets (with notice to you where required by law).

6. Cookies and local storage

See our Cookie Policy for the full list of what we store in your browser and why.

7. Data retention

We keep account and billing records for as long as your account is active and as needed to meet legal/tax obligations after that. Operational and security logs are kept on fixed, automatically-enforced schedules (for example: rate-limit records for 2 days, failed-generation error detail for 30 days before being cleared, account security activity for 1 year, browser security reports for 30 days) — see our published Data Processing Agreement for the current technical schedule. You can delete saved responses, workbooks, and other content directly in the product at any time, and you can request full account deletion from Settings → Security, or by contacting us.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent you’ve given us. You can export your account data and request deletion from the dashboard’s Privacy section, or by contacting us at the address below. We will respond to verified requests within the timeframe required by applicable law (for example, 30 days under GDPR, or as specified under the Saudi Personal Data Protection Law).

9. International transfers

Our infrastructure and processors may store or process data outside your own country, including in the United States and European Union. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) with our processors for these transfers.

10. Children’s privacy

ResponsiveMe is a business tool and is not directed to, or knowingly used by, children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We’ll update the effective date above when this policy changes, and for material changes we’ll provide reasonable notice (such as an in-app notification or email) before they take effect.

12. Contact

Questions or privacy requests can be submitted through the contact page.