Privacy Policy

Last updated: October 12, 2026

Respondro ("we", "our", "us"), operated by AGR Brands LLC (a Wyoming, USA limited liability company) and Agr Consult (a company registered in Denmark, CVR 44083701), provides the Respondro application for Shopify merchants. This Privacy Policy explains how we collect, use, and protect information when you use our service.

1. Information We Collect

When you install and use Respondro, we collect the following information:

• Shopify store data: Store name, domain, currency, timezone, and store policies. We access order data, customer data, product data, and fulfillment data through the Shopify API to provide customer service automation.
• Customer email content: Emails forwarded to Respondro from your customer service inbox are stored in our database to enable AI-powered classification, drafting, and response management.
• Email connection credentials: IMAP/SMTP credentials you provide to connect your email account, or the Google access tokens issued when you connect Gmail with Google sign-in. Passwords and tokens are encrypted at rest using AES-256-GCM encryption.
• Account information: Your email address and store name used for authentication.

2. How We Use Your Information

We use your information exclusively to provide the Respondro service:

• Classifying incoming customer emails by category and priority
• Generating AI-drafted responses using Anthropic's Claude API
• Looking up Shopify order data to provide accurate, specific replies
• Executing approved actions (refunds, cancellations, address changes) via the Shopify API
• Displaying customer service metrics and analytics in your dashboard

3. AI Processing

Customer emails are processed by Anthropic's Claude AI to classify intent and generate draft responses. Important details:

• Your email data is never used to train AI models. Anthropic's API does not use customer data for model training.
• AI processing happens in real-time and results are stored in our database for your review.
• You maintain full control over whether AI-generated responses are sent automatically or require manual approval.

4. Data Storage and Security

• Database: All data is stored in Supabase (hosted on AWS infrastructure in the EU region).
• Encryption: Email passwords are encrypted at rest using AES-256-GCM. All data in transit is encrypted via TLS.
• Access control: Row Level Security (RLS) ensures each merchant can only access their own data. Server-side operations use a separate admin client with elevated permissions.
• Isolation: Each store's data is completely isolated from other stores through database-level security policies.

5. Google User Data

If you connect a Gmail or Google Workspace inbox with Google sign-in, Respondro asks Google for three permissions: read your email (gmail.readonly), send email on your behalf (gmail.send), and see your email address (userinfo.email).

• What we access: unread emails in your inbox, including the sender, subject, message body, attachments and the headers needed to keep replies in the same conversation, and your Gmail address, to identify the connected inbox. We do not access your contacts, calendar, Drive or any other Google data.
• How we use it: only to provide the customer service features you use in Respondro: showing customer emails in your dashboard, classifying them, drafting replies, finding the matching Shopify orders, and sending replies from your Gmail address. A reply is sent when you approve it, or automatically if you turn on auto-reply, following the rules you set.
• AI processing: to classify an email and draft a reply, the email's sender, subject and body are sent to Anthropic's Claude API together with related order details. Anthropic does not train its models on this data and keeps API data only for a limited period under its commercial terms.
• How we store it: emails and attachments are stored in our database and file storage (Supabase). Google access and refresh tokens are encrypted at rest using AES-256-GCM. All data is encrypted in transit using TLS.
• How we share it: we do not sell Google user data and do not use it for advertising. We share it only with the service providers needed to run Respondro (Anthropic for AI drafting, Supabase for the database and file storage, and Vercel for the servers that run the app), or when the law requires it.
• Human access: no one at Respondro reads your emails unless you ask us for help with a specific email, it is needed to investigate a security issue or abuse, or the law requires it.
• How it is deleted: when you disconnect your inbox in Respondro (Email Forwarding → Disconnect), we delete the stored Google tokens straight away and stop reading your inbox. Emails already imported stay in your dashboard until you uninstall Respondro or ask us to delete them. You can also remove Respondro's access at any time at myaccount.google.com/permissions. When you uninstall Respondro from Shopify, Shopify sends us a deletion request 48 hours later; we then revoke Respondro's Google access and permanently delete your store's data, including stored emails, attachments and Google tokens. You can ask for deletion at any time by emailing support@respondro.ai.

If you connect Gmail with an app password instead of Google sign-in, Respondro reads and sends email over IMAP and SMTP, and the same use, storage, sharing and deletion rules apply.

Respondro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Sharing

We do not sell, rent, or share your data with third parties except:

• Anthropic (Claude AI): Email content is sent to Anthropic's API for classification and response generation. Anthropic does not train its models on this data and keeps API data only for a limited period under its commercial terms.
• Shopify: We interact with Shopify's API using the access token you grant during installation. We only access the data scopes you explicitly approve.
• Law enforcement: We may disclose data if required by law or to protect the rights and safety of our users.

7. Data Retention

• Your data is retained for as long as the Respondro app is installed on your Shopify store.
• When you uninstall the app, we retain your data for 48 hours (in case of accidental uninstall), then permanently delete it.
• Upon receiving a Shopify shop/redact webhook, all store data is permanently deleted.
• Customer-specific data is deleted upon receiving a Shopify customers/redact webhook.

8. GDPR Compliance

Respondro complies with the General Data Protection Regulation (GDPR):

• Data access: You can request an export of all data we hold about your store or your customers at any time by contacting support@respondro.ai.
• Data deletion: You can request deletion of your data at any time. Uninstalling the app triggers automatic deletion within 48 hours.
• Data portability: We can provide your data in a machine-readable format upon request.
• Data Processing Agreement (DPA): Available upon request for enterprise customers.

9. Shopify Customer Data

We access customer data from your Shopify store solely to provide customer service functionality. Specifically:

• Customer names and emails are used to match incoming support emails with Shopify orders.
• Order data (order numbers, tracking info, fulfillment status, financial status) is used to generate accurate AI responses.
• We do not access or store customer payment information — all payment processing is handled by Shopify.

10. Cookies

We use minimal cookies for authentication and security:

• Authentication cookies: To maintain your logged-in session.
• CSRF protection cookies: To prevent cross-site request forgery during the Shopify OAuth flow.

We do not use advertising cookies, tracking pixels, or analytics cookies.

11. Children's Privacy

Respondro is a business-to-business service and is not intended for use by individuals under 18 years of age.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: support@respondro.ai
Company: AGR Brands LLC (operating as Respondro)
Registered address: 1309 Coffeen Avenue, STE 1200, Sheridan, Wyoming 82801, USA
Company: Agr Consult (operating as Respondro), CVR 44083701
Registered address: C.F. Richs Vej 105C, sal 5507, 2000 Frederiksberg, Denmark
Designed in: Copenhagen, Denmark