Privacy

Rovoki measures how AI answer engines describe brands. The data we hold is mostly about brands and public answers, not about people. The personal data we do hold is the small amount needed to run accounts: who you are, which workspace you belong to, and what you did in the product.

Account data. Your name, work email address, and workspace membership and role. Sign-in is handled by WorkOS; we store a mirror of your identity so the app can decide what you are allowed to see.

Audit data. The brands, questions, competitors, and markets you configure, and the answers the engines return for them. Answers are stored as the engines produced them, together with the citations they contain.

Operational records. Credit ledger entries, job and error logs, and request metadata such as IP address, used for rate limiting and abuse prevention.

We do not track individuals across the web, we do not buy or sell personal data, and we do not run advertising or third-party analytics on this product. We do not ask for or store payment card details.

To provide the service you or your organisation asked for: running audits, producing reports, metering usage, keeping accounts secure, and supporting you when something breaks. We do not use your audit content to train models.

We use a small number of processors, each for a single purpose: Supabase (database and file storage), WorkOS (authentication and organisation membership), Resend (transactional email), and the answer engines we measure, which are sent your audit questions in order to answer them. Infrastructure is hosted in the EU.

Audit data is retained for as long as your workspace is active, because the product’s value is the comparison over time. Account data is deleted when a workspace is closed. Operational logs are kept for a short period and then discarded.

A report can be shared through an unguessable link. Anyone holding that link can read that one report, so treat it as you would the report itself. Links can be revoked at any time from the report, and can be given an expiry date.

Under India’s Digital Personal Data Protection Act, and equivalent rights elsewhere, you may ask for a copy of your personal data, ask us to correct it, or ask us to delete it. Where your organisation holds the account, we will work through your workspace administrator. Write to us and we will respond within the statutory period.

Questions, requests, or complaints: privacy@rovoki.com.