This policy covers the Rispa account you create on this website. A separate policy covers people who message a Rispa-powered WhatsApp number as customers of one of our clients.
Who we are
Rispa provides an AI assistant that answers WhatsApp messages and takes bookings for businesses. For questions about this policy, or to ask us to delete your data, contact privacy@rispa.ai.
What we collect
Your account. Email address and a securely hashed password. We never see or store your password in readable form.
What you tell us about your business. Business name, type, opening hours, services, policies, location and the other answers you give during setup. This becomes the knowledge your assistant uses when replying to your customers.
Your WhatsApp connection details. Your business WhatsApp number and the Meta identifiers needed to connect it.
Your plan. Which tier you chose and whether the membership is active.
Location, only if you ask for it. If you use “Locate me” when filling in your address, your browser sends coordinates to OpenStreetMap to look up the address. We never do this without you pressing the button, and we store only the resulting address text, not the coordinates.
What we do with it
We use it to set up and run your assistant, to contact you about your account, and to take payment. We do not sell your data, and we do not use it to train models.
Who else sees it
Supabase — hosts the database holding your account and setup answers.
Resend — sends our emails to you.
Anthropic — processes message content so the assistant can reply.
Meta — operates the WhatsApp Business Platform your number runs on.
OpenStreetMap — only when you press “Locate me”.
How long we keep it
We keep your account data while your account exists. Delete your account and we remove your profile and setup answers. Some records may be kept where the law requires it, such as invoices for tax purposes.
Your rights
You can ask us for a copy of your data, correct it, or have it deleted. You can delete your account yourself from your dashboard. If you are in the UK or EU you also have the right to complain to your data protection regulator.
Changes
If we change this policy materially we will tell you by email before it takes effect.