Last updated: February 2, 2026
This Privacy Policy describes how Respondex, Inc. ("Respondex," "we," "us") collects, uses, and protects information when you use our website and the Respondex application (together, the "Service").
Content you upload to Respondex — including RFP and DDQ questionnaires, knowledge-base documents, pricing sheets, drafted responses, and win/loss outcome data — is never used to train, fine-tune, or otherwise improve any model shared across customers, including any Respondex-operated or third-party foundation model. Retrieval and drafting for your account are performed within your isolated workspace only. Any model improvement work we do uses synthetic or licensed data, never customer content, and is never trained on your account's data even in aggregate or anonymized form without a separate, explicit opt-in.
Name, work email, company name, billing address, and payment details (processed by our PCI-compliant payment processor; we do not store full card numbers).
RFPs, DDQs, security questionnaires, knowledge-base documents, and any drafted or edited responses you create or upload within the Service.
Log data including IP address, browser type, pages visited, features used, and timestamps, collected via first-party analytics and essential cookies.
All data in transit is encrypted using TLS 1.3. All data at rest is encrypted using AES-256. Access to customer content is restricted to authorized personnel on a least-privilege basis, logged, and subject to periodic access review. We maintain a SOC 2 Type II report available to customers under NDA upon request, and conduct annual third-party penetration testing.
Content is retained for the duration of your subscription plus 30 days, after which it is permanently deleted from production systems (backups are purged on a rolling 90-day cycle). You may request deletion of your account and associated content at any time by contacting privacy@respondex.online; we will confirm completion within 30 days.
If you are located in the European Economic Area, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact privacy@respondex.online. You also have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale or sharing of personal information. Respondex does not sell or share personal information as defined by the CCPA. To submit a request, contact privacy@respondex.online or use the request form linked in your account settings.
We use a limited set of sub-processors for infrastructure (cloud hosting), payment processing, and customer support tooling, each bound by data processing agreements consistent with this policy. A current list of sub-processors is available upon request.
Where personal data is transferred outside the EEA, we rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism.
The Service is not directed to individuals under 16, and we do not knowingly collect personal information from them.
We will notify active customers by email of material changes to this Privacy Policy at least 30 days before they take effect.
Questions about this policy or a privacy request: privacy@respondex.online. Security disclosures: security@respondex.online.