LEGAL
Last updated: July 2026 · ROCKUL AI LTD
ROCKUL AI LTD ("Rockul AI", "we", "our", "us") operates the ROCKUL.AI platform at rockul.com. We provide AI-powered voice receptionist services to business customers ("you"). For privacy enquiries: privacy@rockul.com.
We collect information you provide directly: account registration details (name, email address, business name, phone number), payment information processed securely via Stripe, and business configuration data (services, FAQs, greeting scripts). We also collect information automatically: call recordings, transcriptions, and summaries generated during calls handled by your AI receptionist; inbound caller telephone numbers; usage data including call duration and frequency; and log data for security and debugging purposes. If you are introduced to ROCKUL.AI by a sales representative, the representative may submit your name, email address, business name, and phone number on your behalf before you create an account — this data is held solely to track the referral and is not used for any other purpose. We also collect anonymous visitor analytics on our homepage (IP address, approximate location, and device type) for a live visitor display feature; IP addresses are used only to derive location and are not stored.
We use collected information to provide and operate the ROCKUL.AI service; process payments and manage your subscription; generate and deliver call transcripts and summaries; improve our AI models and service quality; send transactional communications; respond to support requests; and comply with legal obligations.
Inbound calls to your AI receptionist are processed in real time. Call audio is transmitted to our AI processing partners (including Vapi AI and OpenAI) solely to generate responses and transcripts. We store call transcripts, summaries, and metadata. Call recordings may be retained for up to 30 days for quality assurance. You are responsible for notifying callers that calls may be recorded and processed by AI, as required by applicable law in your jurisdiction.
For users in the United Kingdom and European Economic Area, we process personal data under the following lawful bases: performance of a contract (providing the service you subscribed to); legitimate interests (fraud prevention, service improvement, security); legal obligation (compliance with applicable law); and consent (where you have provided it for specific processing activities). You may withdraw consent at any time without affecting the lawfulness of prior processing.
If you are located in the UK or EEA, you have the right to: access your personal data; correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time. To exercise these rights, email privacy@rockul.com. UK residents may complain to the ICO (ico.org.uk). EU residents may complain to their local supervisory authority.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): the right to know what personal information we collect, use, disclose, and sell; the right to delete personal information we hold about you; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); the right to non-discrimination for exercising your rights. To exercise any CCPA/CPRA right, email privacy@rockul.com with the subject line "California Privacy Request". We will respond within 45 days.
We are committed to complying with applicable privacy laws worldwide. If you are located in Canada (PIPEDA/Law 25), Australia (Privacy Act 1988), or another jurisdiction with data protection legislation, you may have additional rights under local law. Please contact privacy@rockul.com to exercise any applicable rights. We will handle all requests in good faith within a reasonable timeframe.
We share data with trusted third-party service providers who process it on our behalf: Supabase (database hosting), Stripe (payment processing), Twilio (telephony), Vapi AI (AI call processing), OpenAI (language model), Resend (email delivery), and Vercel (infrastructure). All providers are contractually bound to handle data securely and only for specified purposes. We do not sell your personal data to any third party. We may disclose data where required by law or to protect rights and safety.
Some of our service providers operate in the United States and other countries. Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful transfer mechanisms. Specifically: Stripe (USA, SCCs), OpenAI (USA, SCCs), Vercel (USA, SCCs). A full list of sub-processors is available on request.
Account data is retained for as long as your account is active, plus 6 years after closure for legal compliance. Call transcripts and summaries are retained for 12 months. Call recordings are retained for 30 days. You can request deletion of your data at any time by contacting privacy@rockul.com.
We use essential cookies to maintain your session and provide the service. We do not use advertising or tracking cookies. No third-party analytics are deployed. See our Cookie Policy for full details.
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security on our database, and regular security reviews. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.
ROCKUL.AI is a business service and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact privacy@rockul.com.
We may update this policy from time to time. Material changes will be notified by email to registered account holders at least 14 days before taking effect. Continued use of the service after that date constitutes acceptance.
For any questions about this privacy policy or your personal data, contact us at privacy@rockul.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to your relevant data protection authority.