This is an English translation for convenience. If it differs from the Spanish version, the Spanish version applies.
RespondeAI is a sales assistant that answers, on behalf of online stores, the messages their customers send on WhatsApp and other messaging channels. This policy explains what personal data we process, why, who we share it with, how long we keep it and how you can exercise your rights under Ecuador's Personal Data Protection Act (Ley Orgánica de Protección de Datos Personales, LOPDP).
Who we are
PG Solutions (Paula Alejandra Garces Barona), based in Puerto Ayora, Galápagos, Ecuador. Contact for any privacy matter: soporte@respondeai.app.
Our role: processor, not controller
When you write to a store that uses RespondeAI, the store is the controller of your data: it decides what the data is used for, and it is the business you are writing to. RespondeAI acts as a processor: we process that data only to provide the service to the store and following its instructions. The store must tell you that an automated assistant answers its messages.
What data we process
- The text of the messages you send to the store and the assistant's replies. Before a message is stored and before it is sent to the artificial intelligence model, we replace phone numbers, email addresses, national ID numbers and numbers shaped like a card number.
- Your contact details on the channel (for example, your profile name and your WhatsApp number or username), which the store's inbox (Chatwoot) needs in order to reply to you. The assistant's database does not store your phone number or your name: it stores a pseudonymous identifier calculated from them.
- Files you send, such as a photo of a payment receipt. They stay in the store's inbox for a person to review; the assistant does not read them or send them to the artificial intelligence model.
We do not ask for or process payment card data. The assistant does not charge or verify payments: a person at the store always does that.
What we use it for
- Answering your questions about the store's products, prices, stock, opening hours, location, shipping and payment methods.
- Handing the conversation to a person at the store when you want to buy, when you ask for it, or when the assistant cannot help you.
- Reviewing and improving the quality of the assistant's answers for that store.
We do not use your data for advertising, we do not sell it and we do not share it with other stores. Each store can see only its own conversations.
Who we share it with
To provide the service we use these providers (sub-processors), which process the data only for that purpose:
- Anthropic (United States): the artificial intelligence model that drafts the replies. It receives the text of the messages already stripped of phone numbers, email addresses and ID numbers, and without your contact details.
- Supabase (United States): the database that stores the store's catalog and the assistant's messages.
- Oracle Cloud: the server that runs the assistant and the store's inbox.
- Meta (WhatsApp, and Instagram or Messenger if the store uses them): the channel messages arrive and leave through, under Meta's own terms.
As a result, part of the data is processed outside Ecuador, mainly in the United States.
How long we keep it
The messages the assistant stores are deleted automatically after 90 days, unless the store has set a different period. Conversations in the store's inbox (Chatwoot) are kept for as long as the store keeps them; the store can delete them at any time.
Your rights and how to ask us to delete your data
Under the LOPDP you can ask for access to your data, its correction or update, its deletion, object to its processing or ask for its portability. You can do this in two ways:
- Ask the store you wrote to directly (it is the controller).
- Or email us at soporte@respondeai.app with the subject "Delete my data", the name of the store and the number or username you wrote from. We coordinate with the store and delete the conversation, its messages and the related records from the assistant and from the inbox.
We will confirm by email when the request has been handled. If you are not satisfied with the answer, you can go to Ecuador's Superintendency of Personal Data Protection (Superintendencia de Protección de Datos Personales).
How we protect the data
- Encrypted connections (HTTPS/TLS) with the messaging channels, the database and the AI provider.
- Per-store isolation in the database: each store can access only its own data.
- Administrative access limited to the people who operate the service.
- The system's technical logs do not store message text or full phone numbers.
This website
respondeai.app uses no cookies, has no analytics or third-party trackers and has no forms. Fonts are served from this same site. If you email us, we use your address and your message only to reply to you.
Changes to this policy
If we change this policy, we will publish the new version on this page with its update date.
Contact
PG Solutions (Paula Alejandra Garces Barona) · Puerto Ayora, Galápagos, Ecuador · soporte@respondeai.app