LEGAL
Last updated: August 2026 · ROCKUL AI LTD
Part A applies to the ROCKUL.AI subscription platform. Part B applies to enquiries made through the project quote form and to our app, website, software, game, AI and design services. Where the two overlap, the part that matches the service you are using applies.
ROCKUL AI LTD ("Rockul AI", "we", "our", "us") operates the ROCKUL.AI platform at rockul.com. We provide an AI-powered phone system — call answering, appointment booking, and order-taking for takeaway, restaurant, and retail businesses — to business customers ("you"). For privacy enquiries: privacy@rockul.com.
We collect information you provide directly: account registration details (name, email address, business name, phone number), payment information processed securely via Stripe, and business configuration data (services, FAQs, greeting scripts, menu items and prices). We also collect information automatically: call recordings, transcriptions, and summaries generated during calls handled by your AI receptionist; inbound caller telephone numbers; order details where you use order-taking (items ordered, delivery addresses, and payment status); usage data including call duration and frequency; and log data for security and debugging purposes. If you use the driver-dispatch feature, we collect the names, phone numbers, and (if enabled) push-notification device subscriptions of the drivers you add — drivers access their assigned deliveries via a personal link and do not create a ROCKUL.AI account. If you are introduced to ROCKUL.AI by a sales representative, the representative may submit your name, email address, business name, and phone number on your behalf before you create an account — this data is held solely to track the referral and is not used for any other purpose. We also collect anonymous visitor analytics on our homepage (IP address, approximate location, and device type) for a live visitor display feature; IP addresses are used only to derive location and are not stored.
We use collected information to provide and operate the ROCKUL.AI service; process payments and manage your subscription; generate and deliver call transcripts and summaries; improve our AI models and service quality; send transactional communications; respond to support requests; and comply with legal obligations.
Inbound calls to your AI receptionist are processed in real time. Call audio is transmitted to third-party AI voice and language model providers solely to generate responses and transcripts. We store call transcripts, summaries, and metadata. Call recordings may be retained for up to 30 days for quality assurance. If you use the menu photo-scan feature, the photo you upload is sent to a third-party AI provider solely to extract menu items and prices, and is not retained by us beyond completing that request. You are responsible for notifying callers that calls may be recorded and processed by AI, as required by applicable law in your jurisdiction.
For users in the United Kingdom and European Economic Area, we process personal data under the following lawful bases: performance of a contract (providing the service you subscribed to); legitimate interests (fraud prevention, service improvement, security); legal obligation (compliance with applicable law); and consent (where you have provided it for specific processing activities). You may withdraw consent at any time without affecting the lawfulness of prior processing.
If you are located in the UK or EEA, you have the right to: access your personal data; correct inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time. To exercise these rights, email privacy@rockul.com. UK residents may complain to the ICO (ico.org.uk). EU residents may complain to their local supervisory authority.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): the right to know what personal information we collect, use, disclose, and sell; the right to delete personal information we hold about you; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); the right to non-discrimination for exercising your rights. To exercise any CCPA/CPRA right, email privacy@rockul.com with the subject line "California Privacy Request". We will respond within 45 days.
We are committed to complying with applicable privacy laws worldwide. If you are located in Canada (PIPEDA/Law 25), Australia (Privacy Act 1988), or another jurisdiction with data protection legislation, you may have additional rights under local law. Please contact privacy@rockul.com to exercise any applicable rights. We will handle all requests in good faith within a reasonable timeframe.
We share data with trusted third-party service providers who process it on our behalf, covering: database hosting; payment processing (including Stripe, and Stripe Connect for card payments and deposits you take on bookings and orders); telephony; AI voice and language model processing for call handling; AI processing for the menu photo-scan feature; email delivery; and cloud infrastructure hosting. All providers are contractually bound to handle data securely and only for specified purposes. We do not sell your personal data to any third party. We may disclose data where required by law or to protect rights and safety. A full list of named sub-processors is available on request to privacy@rockul.com.
Some of our service providers operate in the United States and other countries. Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), adequacy decisions, or other lawful transfer mechanisms. A full list of sub-processors, the countries they operate in, and the safeguards used is available on request to privacy@rockul.com.
Account data is retained for as long as your account is active, plus 6 years after closure for legal compliance. Call transcripts and summaries are retained for 12 months. Call recordings are retained for 30 days. You can request deletion of your data at any time by contacting privacy@rockul.com.
We use essential cookies to maintain your session and provide the service. We do not use advertising or tracking cookies. No third-party analytics are deployed. See our Cookie Policy for full details.
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security on our database, and regular security reviews. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.
ROCKUL.AI is a business service and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact privacy@rockul.com.
We may update this policy from time to time. Material changes will be notified by email to registered account holders at least 14 days before taking effect. Continued use of the service after that date constitutes acceptance.
For any questions about this privacy policy or your personal data, contact us at privacy@rockul.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to complain to your relevant data protection authority.
Last updated: 2 November 2026 · ROCKUL AI LTD
Rockul AI Ltd is a company registered in England and Wales (company number 17329373), registered office 66 Paul Street, London EC2A 4NA ("Rockul AI", "we", "us", "our"). We design and build mobile apps, websites, games, bespoke software, AI systems and graphic design for clients worldwide.
Rockul AI Ltd is the data controller (and, under some laws, the "business" or "organisation") responsible for personal data collected through the project enquiry form and service pages on rockul.com. For any privacy enquiry, email privacy@rockul.com.
We only collect what you choose to send us, plus the basic technical data any website receives.
Enquiry details — when you use the quote form: your name, email address, phone number (optional), the type of project you select, and whatever you write in the message box.
Technical data — your IP address, browser type, device type, referring page and the time of your visit, handled by our hosting provider as part of serving and protecting the site.
We do not run advertising trackers, analytics profiling or social media pixels on this site. The only analytics are the anonymous visitor figures described in section 2 of Part A, where IP addresses are used only to derive approximate location and are not stored. We do not collect special category data, and you should not send it to us through the form.
To read your enquiry, reply to you, and prepare a quote.
To carry out work you engage us for, and to communicate with you about it.
To keep the site available, fast and secure, and to prevent spam and abuse.
To meet our legal, tax and accounting obligations.
We do not sell or share your personal data for advertising, we do not use it for automated decision-making or profiling, and we do not use it to train AI models.
Legitimate interests — responding to an enquiry you sent us, running and securing our website, and keeping records of our work.
Performance of a contract — where you engage us for a project, to deliver that project.
Legal obligation — where we must keep records, for example for tax and accounting.
We use a small number of service providers who process data on our behalf:
Resend — delivers quote form submissions to our inbox by email. Your form contents pass through their service.
Vercel — hosts and serves this website and provides security and content delivery. Vercel processes request data including IP addresses.
Our email provider — where your enquiry is received and stored.
We may also share data with our accountants or professional advisers where necessary, or with authorities where the law requires it. We do not share your data with anyone else, and we have never sold personal data.
We are based in the United Kingdom and we work with clients around the world. If you contact us from outside the UK, your personal data will be transferred to and stored in the UK, and some of the providers above operate servers elsewhere, including in the United States and the European Union.
Where personal data leaves the UK or the EEA, it is protected by appropriate safeguards — an adequacy decision, the UK International Data Transfer Addendum, or EU Standard Contractual Clauses, as applicable. You can request details of the safeguards used by emailing us.
Enquiries that do not become projects — up to 24 months, then deleted.
Client project records — for the duration of the engagement and then up to 7 years, to meet UK accounting and tax requirements.
Server and security logs — retained by our hosting provider for a short period, typically under 30 days.
The project enquiry form sets no cookies and the site sets no advertising or analytics cookies. The only cookies are the essential ones described in our Cookie Policy, such as those that keep you signed in to the AI phone system.
Our hosting provider may set a strictly necessary cookie to protect the site from malicious traffic.
If you are in the UK, the EU or the EEA you have the right to:
Access a copy of the personal data we hold about you.
Have inaccurate data corrected.
Have your data erased, where we have no continuing obligation to keep it.
Restrict how we use your data, or object to our use of it.
Receive your data in a portable format, or have it transferred to another provider.
Withdraw consent at any time, where we rely on consent.
Email privacy@rockul.com to exercise any of these. We respond within one month and there is no charge.
If you are a California resident you have the right to know what personal information we collect and why, to request a copy of it, to have it corrected, to have it deleted, and to limit the use of sensitive personal information. You also have the right not to be discriminated against for exercising these rights.
In the past 12 months we have collected identifiers (name, email, phone, IP address) and your own commercial enquiry content, for the business purposes described in section 3. We have not sold or shared personal information as those terms are defined under the CCPA/CPRA, and we do not sell the personal information of minors. To make a request, email privacy@rockul.com — we will verify your identity by replying to the email address we hold. You may use an authorised agent.
If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana or another US state with a comprehensive privacy law, you have broadly similar rights to access, correct, delete and port your personal data, and to opt out of targeted advertising, sale, and profiling. We do not carry out any of those three activities. Requests and appeals go to privacy@rockul.com.
Wherever you are, we apply the same standard: we collect only what we need, tell you what we do with it, keep it secure, and give you access to it and deletion on request.
Canada (PIPEDA) — you may access your personal information and challenge its accuracy, and complain to the Office of the Privacy Commissioner of Canada.
Australia (Privacy Act / APPs) — you may access and correct your personal information and complain to the Office of the Australian Information Commissioner.
New Zealand (Privacy Act 2020) — you may access and correct your information and complain to the Office of the Privacy Commissioner.
Brazil (LGPD) — you have rights of confirmation, access, correction, anonymisation, portability and deletion, and may complain to the ANPD.
Anywhere else — if your local law gives you rights we have not listed, contact us and we will honour them so far as that law applies to us.
The site is served over HTTPS with a valid TLS certificate. Access to enquiry data is limited to the people who need it to respond to you. No system is completely secure, but we take reasonable technical and organisational measures to protect your information, and we will notify you and the relevant regulator where a breach requires it.
This site and our services are aimed at businesses and adults. We do not knowingly collect personal data from anyone under 16 (or under 13 in the United States). If you believe a child has sent us personal data, contact us and we will delete it.
If we change this policy we will update the date at the top of this page. Material changes will be made clear on the site.
For any question about this policy or your personal data, email privacy@rockul.com or use the contact form.
If you are not satisfied with our response you can complain to your local data protection authority. In the UK that is the Information Commissioner's Office at ico.org.uk or 0303 123 1113. In the EU it is the supervisory authority for your country. Elsewhere, it is the regulator named in section 12.
Rockul AI Ltd
Registered in England and Wales, company number 17329373
Registered office: 66 Paul Street, London EC2A 4NA
Privacy enquiries: privacy@rockul.com
