GDPR Compliance

Our Role Under GDPR

Under the GDPR framework, ResponseIQ acts as a data processor when handling review data on your behalf, and as a data controller for your account information. This distinction is important because it defines our responsibilities and your rights.

As a data controller for account information, we determine why and how your personal data (name, email, billing details) is processed. As a data processor for review data, we process Google review content strictly according to your instructions — syncing, generating responses, and publishing replies as you direct.

Right to Access

You have the right to request a complete copy of all personal data we hold about you. This includes your account profile, connected locations, review data, AI-generated responses, billing history, and activity logs.

Navigate to Settings and then the Privacy tab in your dashboard.
Click the "Request Data Access Report" button.
ResponseIQ will compile your data and send a download link to your registered email address within 48 hours.
The report is provided as a structured JSON file that includes all categories of data we hold about you.

Note

You can also exercise your right to access by emailing privacy@responseiq.io. We will respond to all access requests within 30 days as required by the GDPR.

Right to Erasure (Right to Be Forgotten)

You have the right to request the deletion of all personal data we hold about you. When you exercise this right, we permanently delete your account and all associated data, including reviews, AI responses, settings, and activity logs.

You can exercise this right by deleting your account through the dashboard (see the Deleting Your Account article) or by emailing privacy@responseiq.io. Account deletion includes a 30-day grace period during which you can cancel the deletion if you change your mind.

Important

After the 30-day grace period, all data is permanently and irreversibly deleted. We cannot recover your data once the deletion has been finalized. Please make sure to export your data before requesting erasure if you want to keep a copy.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. ResponseIQ provides a full data export feature that generates a JSON file containing all of your data. See the Exporting Your Data article for detailed instructions.

The exported data is formatted in standard JSON, making it easy to import into other systems or analyze with common data tools. We do not use proprietary formats that would lock you in.

Legal Basis for Data Processing

We process your data under the following legal bases as defined by Article 6 of the GDPR:

Data Category	Legal Basis	Explanation
Account information	Contract performance	Required to provide the service you signed up for.
Review data	Legitimate interest	Syncing and managing reviews is the core function of the service you contracted.
AI-generated responses	Contract performance	Generating responses is the primary service we provide.
Billing data	Legal obligation	We are required to maintain billing records for tax and accounting purposes.
Usage analytics	Legitimate interest	Used to improve the service and ensure platform stability.
Marketing emails	Consent	Only sent if you explicitly opt in. You can withdraw consent at any time.

Data Protection Officer

If you have questions or concerns about how we handle your data, or if you wish to exercise any of your GDPR rights, you can contact our Data Protection Officer at privacy@responseiq.io. We aim to respond to all inquiries within 5 business days and to fulfill all formal GDPR requests within 30 calendar days.