Privacy Policy
Last updated: September 30, 2026
At Resply, we take the protection of your data very seriously. This policy explains what data we collect, why we collect it, and how we protect it. We are committed to complying with the General Data Protection Regulation (GDPR).
EU hosting
Data hosted in Europe (AWS eu-west-1, Ireland)
No resale
Your data is never sold to third parties
No AI training
Your data is not used to train models
1.Data collected
We collect the following categories of data:
| Data type | Examples | Legal basis |
|---|---|---|
| Identity | Name, email, company | Contract |
| Conversations | Customer support messages | Contract |
| Knowledge base | FAQ, documentation | Contract |
| Technical logs | IP address, login history | Legitimate interest (security) |
| Billing | Via Stripe (tokenized) | Legal obligation |
2.Purposes of processing
- Provide the automated customer-support service
- Improve the quality and relevance of AI answers
- Generate insights and statistics for your dashboard
- Manage your subscription and billing
- Send service-related communications
- Ensure security and prevent fraud
3.Subprocessors
We use the following subprocessors, all GDPR-compliant:
4.Retention period
5.Your rights (GDPR)
In accordance with the GDPR, you have the following rights:
To exercise your rights, write to us at: contact@resply.io
Response time: 30 days maximum
6.Cookies
We only use cookies that are necessary for the service to work. No advertising or audience measurement cookies.
| Cookie | Type | Duration | Consent |
|---|---|---|---|
| sb-*-auth-token | Essential (sign-in) | 400 days | Not required |
| resply_active_org | Essential (active workspace) | 1 year | Not required |
| resply_locale | Language preference | 1 year | Not required |
7.Security
We implement the following security measures:
- TLS (HTTPS) encryption for all communications
- AES-256 encryption of data at rest
- Two-factor authentication available
- Bot protection on sign-up and sign-in (Cloudflare Turnstile)
- Strong password policy
- Data isolation per organization
Personal data
For any question about your personal data or to exercise your GDPR rights.
contact@resply.io