Privacy Policy

1. Who We Are

Respondry ("we", "us") provides an application that helps manufacturing teams capture and review inbound requests for quotation (RFQs) sent by email. If you have questions about this policy, contact info@respondry.co.uk.

2. What Data We Collect

When you use Respondry, we may process:

• Account data: your name and email address (from Firebase Authentication).
• Workspace data: workspace name, company name, primary process, and a forwarding address.
• Inbound RFQ data you forward: email headers, sender/recipient info, subject, body, and attachments.
• Derived data: extracted fields, summaries, and risk flags generated from the inbound RFQ content.
• Usage/billing data: RFQ counts and Stripe subscription or purchase metadata (if enabled).

3. Why We Use Your Data

We use the data to:

• Provide the service (ingest RFQs, show them in your dashboard, and retrieve attachments).
• Operate your workspace (billing limits, usage tracking, and support).
• Improve reliability and security (logging, abuse prevention, and troubleshooting).

4. Lawful Bases (UK GDPR)

We process personal data based on contract necessity (to provide the service), legitimate interests (security, fraud prevention, and service improvement), and consent where required.

5. Data Sharing

We do not sell your data. We share data only with service providers needed to run Respondry, such as:

• Google Firebase (authentication, database, and storage).
• Resend (inbound email receipt and optional outbound notifications).
• Stripe (billing, if enabled).

Each customer workspace is logically isolated. Respondry enforces access controls so users only see RFQs in their own account.

6. Retention

By default, Respondry retains RFQ records to support your workflow. Attachments may be deleted after a retention period once an RFQ is marked closed, declined, or canceled (for example, 30 days) to control storage cost. Your dashboard will indicate when attachments have been purged.

7. Security

We use authentication and server-side authorization checks to restrict access to RFQs and attachments. You are responsible for keeping your login credentials secure.

8. International Transfers

Some providers may process data outside the UK. Where applicable, we rely on appropriate safeguards for international transfers.

9. Your Rights

You may have rights to access, rectify, erase, restrict processing, object, and portability. To exercise rights, contact info@respondry.co.uk.

10. Changes

We may update this policy from time to time. We will post the updated policy on this page.