Privacy Policy

Introduction

This Privacy Policy explains how MarkSimpl Innovations Private Limited, doing business as Responsr ("Responsr", "we", "us", or "our"), collects, uses, stores, and shares personal information when you visit our website, use Responsr, connect a third-party service, or otherwise interact with us.

Responsr is a business communications and customer relationship platform. It helps teams manage WhatsApp and email conversations, contacts, campaigns, follow-ups, workflows, reporting, and related business operations in a shared workspace.

Who We Are and How to Contact Us

Responsr is operated by MarkSimpl Innovations Private Limited (CIN: U58201KA2025PTC202277), located at WeWork, Cinnabar Hills, EGL Business Park, Challaghatta, Bengaluru, Karnataka 560071, India.

For privacy questions or requests, email privacy@responsr.ai. Please do not send passwords, access tokens, or other sensitive credentials by email.

Scope

This Privacy Policy applies to the Responsr website, application, integrations, APIs, support interactions, and related services that link to this policy.

Third-party services such as Meta, WhatsApp, Google, Clerk, Shopify, and payment providers operate under their own terms and privacy policies. This policy still applies to personal information that Responsr receives from or processes through those services.

Roles and Responsibilities

Depending on the context, Responsr may act as a controller of personal information or as a processor or service provider acting on behalf of a business customer.

We generally act as a controller for account registration information, billing and business contact information, website analytics, security data, and support communications.

We generally act as a processor or service provider for contacts, messages, files, and other customer data that a business customer submits to Responsr or makes available through a connected service.

Our customers decide why and how their customer data is used. They are responsible for providing appropriate notices and having a valid legal basis for importing contacts, connecting accounts, sending messages, running campaigns, and otherwise using personal information through Responsr.

Information We Collect

Depending on how Responsr is used, we may collect:

• Account information, including your name, email address, profile image, organization, role, authentication identifiers, and account preferences. Authentication is provided through Clerk; Responsr does not need to receive your Clerk password.
• Workspace and billing information, including workspace members and invitations, permissions, business profile settings, subscription or billing records, integrations, API-key metadata, and configuration choices.
• Contact and CRM data, including names, phone numbers, email addresses, identifiers, tags, attributes, notes, comments, assignments, pipeline stages, tasks, events, and communication preferences.
• Message and campaign data, including WhatsApp and email content, participants, subject lines, timestamps, message and thread identifiers, templates, attachments, delivery events, replies, opt-out signals, and campaign activity.
• Connected-service data, including account identifiers, profile information, authorization tokens, connection health, provider configuration, and data returned by services that a customer chooses to connect. For example, this may include Gmail data, WhatsApp Business data, and Shopify customer or order-event data.
• Files and media, including contact-import files, message attachments, workspace logos, campaign media, and other documents uploaded to the service.
• Device, website, and diagnostic data, including IP address, browser and device information, pages viewed, referring pages, interactions with our website, timestamps, error reports, performance data, and security logs.
• Browser storage and notification data, including authentication or session information, theme and sidebar preferences, the selected workspace, consent preferences, and web-push subscription details when notifications are enabled.
• Communications with us, including support requests, emails, feedback, and other information you choose to provide.

Sources of Information

We collect information directly from you, from your organization and its authorized users, from contacts and other people who communicate with a connected business account, from services that you choose to connect, and automatically when you use our website or application.

We may also receive information from providers that help us authenticate users, host and secure the service, process payments, monitor errors, provide analytics, deliver communications, and operate customer-requested integrations.

How We Use Information

We use personal information to:

• Provide, operate, maintain, and improve Responsr.
• Synchronize and display authorized WhatsApp and email conversations.
• Send messages and run campaigns or workflows at the direction of authorized workspace users.
• Manage contacts, assignments, follow-ups, tasks, reporting, and team collaboration.
• Authenticate users and secure accounts and integrations.
• Save functional preferences and deliver notifications requested by users.
• Provide customer-facing automation and AI-assisted features described below.
• Analyze website performance and understand how visitors use our public pages.
• Measure and improve our advertising, subject to applicable consent and opt-out requirements.
• Respond to support requests and send operational or service communications.
• Detect, prevent, and investigate abuse, fraud, security incidents, and technical problems.
• Enforce our terms and the policies of connected platforms.
• Comply with applicable laws, regulations, and legal requests.

AI-Assisted Features

Responsr uses automated systems and third-party AI service providers, including Google, to provide and monitor user-facing features. Depending on the feature, these systems may process message text and relevant contact, workspace, and CRM context to clean email presentation, classify conversations, prepare summaries, identify sales signals, suggest follow-up tasks or actions, and monitor the operation of those features.

AI-generated results may be incomplete or incorrect. They are designed to assist authorized workspace users and do not make legal or similarly significant decisions about individuals on their own. We do not use Google Workspace API data to train advertising models or for personalized advertising.

Connected Services

Google Workspace and Gmail

When an authorized user connects Google Workspace, Responsr requests access to basic Google account information and the Gmail permissions needed to read mailbox messages and send email. We use that access to synchronize email into the shared inbox, preserve conversation history, display message content and attachments, and send replies or new messages requested by authorized workspace users.

The Google user data we may access and store includes the connected account's email address and profile information; message headers, senders, recipients, subject lines, bodies, timestamps, labels, threads, identifiers, and attachments; and authorization tokens and technical state needed to maintain the connection. We may process relevant message content through service providers when necessary to provide visible Responsr features, including email formatting and AI-assisted inbox features.

We do not sell Google user data, use it for advertising, or transfer it except as necessary to provide or improve user-facing Responsr features with appropriate authorization, protect the service, comply with law, or complete a corporate transaction with any consent required by Google policy. Responsr personnel do not read Google message content unless the user has given affirmative permission for specific support, access is necessary to investigate a security or abuse issue, access is required by law, or the information has been aggregated and de-identified for permitted internal operations.

Responsr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting Google Workspace stops future synchronization and we attempt to revoke the associated authorization. Information already synchronized into Responsr may remain as customer data until it is deleted by the customer, in response to a valid request, or under our retention practices.

WhatsApp Business and Meta

When a customer connects a WhatsApp Business account, Responsr processes account configuration, phone-number and business-profile information, contacts, templates, messages, attachments, delivery events, and related provider data to operate the connected messaging features. Meta and WhatsApp also process information under their own terms and privacy policies.

Shopify and Other Integrations

When a customer connects Shopify or another supported integration, Responsr processes the account, customer, order, webhook, or event data needed to provide the integration and any workflows the customer configures. Customers can disconnect integrations through the product where that option is available.

Cookies and Similar Technologies

Responsr uses cookies, local storage, and similar browser technologies for the following purposes:

• Necessary and functional storage supports authentication, security, session continuity, workspace selection, interface preferences such as theme or sidebar state, and web-push notifications requested by the user.
• Analytics and advertising technologies provided by Google help us understand use of our public website, measure campaign performance, and advertise Responsr.
• Consent storage remembers choices made through any cookie or consent controls we provide.

Where applicable law requires consent, we seek it before using non-essential analytics or advertising storage and communicate the user's choice to Google through Consent Mode. Rejecting non-essential storage does not prevent the core Responsr application from working. Users may change an available consent choice or use browser controls to block or delete cookies and local storage, although blocking necessary storage may affect authentication or product functionality.

Legal Grounds

Where a law requires us to identify a legal basis, we rely on one or more of the following:

• Contract, when processing is needed to create an account, provide requested features, maintain a connected service, or perform our agreement with a customer.
• Legitimate interests, when reasonably necessary to operate, secure, support, and improve Responsr, prevent abuse, and communicate with business users, provided those interests are not overridden by applicable privacy rights.
• Consent, for analytics, advertising, connected-account access, or other processing where consent is required. Consent may be withdrawn, although withdrawal does not affect processing already carried out lawfully.
• Legal obligations, when processing is necessary to comply with applicable law, regulation, court order, or lawful request.

Sharing of Information

We may share personal information:

• With authorized members of the relevant customer workspace.
• With vendors that provide hosting and storage, authentication, payment processing, communications, error and performance monitoring, analytics, advertising, AI processing and tracing, security, and customer support. These providers may include Clerk, Google, Meta, Shopify, Sentry, LangSmith, and cloud-infrastructure providers, depending on the features used.
• With a connected service when a customer asks us to perform an action through that service.
• With professional advisers, auditors, insurers, and financing providers where reasonably necessary and subject to appropriate confidentiality obligations.
• Where required by law or reasonably necessary to protect users, the public, Responsr, or another person's rights and safety.
• In connection with a merger, acquisition, restructuring, financing, or sale of all or part of our business, subject to applicable notice and consent requirements.

We do not sell personal information for money. Some privacy laws define a sale or sharing more broadly. Where those laws apply, disclosures of website activity or device identifiers to Google for targeted advertising may be treated as a sale or sharing, and we provide the consent or opt-out choices required by law. We do not disclose Google Workspace API data to advertising platforms or use it for advertising.

Data Retention

We retain personal information for as long as reasonably necessary to provide Responsr, maintain an active customer workspace or connected service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention depends on the type and sensitivity of the information, customer configuration and instructions, the duration of the account or integration, legal requirements, and security or operational needs. Authorization tokens are retained while needed to operate a connection and are removed or invalidated when the connection is revoked, expires, or is otherwise no longer required. Customer content may remain until the customer deletes it, closes the workspace, or gives us a valid deletion instruction. Limited copies may remain temporarily in backups, security records, or logs until they are overwritten or no longer needed.

When we act as a processor, the customer controls retention of its customer data subject to the service agreement and applicable law. We may retain information where continued storage is legally required or necessary to establish, exercise, or defend legal claims.

Security

We maintain administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction.

These measures may include access restrictions, authentication controls, logging, backups, monitoring, secure development practices, and encryption or similar safeguards appropriate to the information and the risks involved.

No method of transmission over the internet or method of electronic storage is completely secure. Accordingly, while we work to protect information in our care, we cannot guarantee absolute security.

International Transfers

Responsr is based in India and uses providers that may process information in India, the United States, and other countries. Those countries may have privacy laws different from the country where the information was collected.

Where required, we use contractual protections or other legally recognized transfer mechanisms and take steps intended to keep transferred information protected consistently with this policy. Contact us if you need more information about the safeguards relevant to a particular transfer.

Your Responsibilities

If you import contacts or connect a WhatsApp Business account, mailbox, store, or another service, you are responsible for having the permissions, notices, and lawful basis required to process and communicate with the affected people.

Connected-service providers may apply their own terms and privacy policies to data processed through their systems.

Your Rights and Choices

Depending on your location and our role, you may have the right to:

• Access or obtain a copy of personal information.
• Correct or update inaccurate information.
• Request deletion or restriction of information.
• Object to certain processing or request data portability.
• Withdraw consent where processing is based on consent.
• Opt out of certain targeted advertising, sale, or sharing where applicable.
• Appeal a decision on a privacy request where applicable.
• Lodge a complaint with an applicable privacy or data-protection authority.

You can manage certain account, integration, notification, and browser-storage choices directly in Responsr or through your browser. You may revoke Google's access from your Google Account and disconnect supported integrations from Responsr.

To exercise a privacy right, email privacy@responsr.ai. We may ask for information reasonably necessary to verify your identity, authority, and relationship with Responsr. Where Responsr processes information for a customer, please direct your request to that customer first; we will assist the customer as required by our agreement and applicable law.

Children

Responsr is a business service and is not directed to people under 18. We do not knowingly allow children to create Responsr accounts. Customer communications may contain information about children, in which case the customer is responsible for ensuring that its use of the information is lawful and appropriate.

Changes

We may update this Privacy Policy to reflect changes to Responsr, our practices, or applicable law. We will update the date shown on this page and, where appropriate, provide additional notice through the website, product, or email. If a change requires consent, we will request it before carrying out the new processing. We will notify affected Google users and obtain any required consent before using Google user data for a materially new purpose.

Contact

Questions, privacy requests, or complaints may be sent to privacy@responsr.ai or by post to:

MarkSimpl Innovations Private Limited
WeWork, Cinnabar Hills, EGL Business Park, Challaghatta, Bengaluru, Karnataka 560071, India.