Data Protection Policy
Last updated: May 4, 2026
Richpanel has implemented technical and organizational measures to safeguard the personal data we store on behalf of customers and end-users. Our Terms of Service, Privacy Policy, and supporting policies have been updated to reflect GDPR compliance, and the personal data we collect or process is communicated transparently so data subjects can exercise their rights.
What is GDPR?
GDPR stands for General Data Protection Regulation — a ruleset giving EU citizens control over personal data, forming the core of Europe's digital privacy legislation. Organizations must gather personal data legally, protect it from misuse, and respect data owners' rights.
Richpanel's Compliance
Richpanel has implemented technical and organizational measures to safeguard personal data stored via its website or products. Terms of Service, Privacy Policy, and supporting policies have been updated to reflect GDPR compliance. All personal data collected or processed is clearly communicated for transparency and accountability.
Processes exist to rectify errors or inaccuracies in data subjects' personal data, provided this does not conflict with the organization's intellectual property.
Data export is available via an admin panel CSV export function. Analytics-derived data is not subject to portability. Richpanel may choose not to store or to delete certain data and may not have it available for porting.
Data Collection & Processing
Richpanel collects data through the following entities:
Collection methods include tracking pixels, UTM parameters, cookies, and direct form submissions. Data is used to improve solutions and customer experience.
Third Party Processors
Richpanel Website
| Third Party Processor | Data Policy |
|---|---|
| Google Analytics | Data collected; Data retention policy |
| Data policy | |
| Zapier | GDPR compliance |
| Hubspot | Data Policy |
Richpanel App
| Third Party Processor | Data Policy |
|---|---|
| Google Analytics | Data collected; Data retention policy |
| Google Tag Manager | Data privacy and security |
| Data policy | |
| Gmail | Google data retention |
| Hotjar | Data retention |
| Adwords | Data retention |
| Hubspot | Data Policy |
| Zapier | GDPR compliance |
| Open AI | Enterprise Privacy Policy; Sharing and Publication Policy; Privacy Policy |
Support Docs
| Third Party Processor | Data Policy |
|---|---|
| Google Analytics | Data collected; Data retention policy |
Shopify App Store
| Third Party Processor | Data Policy |
|---|---|
| Google Analytics | Data collected; Data retention policy |
Data Storage — Method & Location
All storage is via Amazon Web Services, located in US West.
| Data Type | Purpose |
|---|---|
| App data (tickets, chats, messages, emails, phone numbers, personal info) | Service delivery; sensitive data (CC numbers, IBAN, SSN) auto-removed |
| App attachments (customer and end-user file attachments) | Stored in AWS S3 for serving to end-users |
| Richpanel App backups | Disaster recovery; stored in EBS Volumes |
Data Retention
- Free/trial users: Data retained for 60 days after trial ends if not converted.
- Paid subscribers: Data retained 60 days after contract termination; deleted immediately upon official request.
- Exceptions may apply for legal, billing, or accounting matters.
Data Deletion
- Account marked as deactivated → deletion process initiated
- 60 days after deactivation → marked "Up For Deletion"
- 15 days after that → permanent deletion from database and all storage
On customer request, deletion can be accelerated to within a few hours.
Privacy Policy
Available at: https://richpanel.com/privacy-policy/
Contact Us
If you have questions or complaints regarding Company's Privacy Policy or associated practices, please contact us at talk@richpanel.com.
Data Protection inquiries: talk@richpanel.com