Privacy Policy

Effective as of October 5, 2026.

Rocalyn LLC (“Rocalyn,” “we,” “us” or “our”) provides an AI-powered virtual assistant that answers inbound telephone calls for owner-operated US businesses (the “Service”). This Privacy Policy describes how we process personal information that we collect through our website and online properties that link to this Privacy Policy, our marketing activities, and the operation of the Service.

Our role for information from calls and messages. When our assistant answers a call, or we carry a text message between a subscriber and a person who has texted that subscriber’s number, the record we create is processed on behalf of, and on the instructions of, the subscribing business (for example a real-estate professional or brokerage), who is the controller/business for that record. This Privacy Policy does not govern our processing of that caller or sender information on our subscribers’ behalf; if you are a caller, or someone who has texted a business, with questions or concerns about a record held by the business you contacted, please direct them to that business. This Privacy Policy governs the information for which Rocalyn is the controller — principally our subscribers’ account information and our website data. Please see the “Your choices” section below for the choices we offer to users directly, regardless of jurisdiction.

Index

  • Personal information we collect
  • Tracking & other technologies
  • How we use your personal information
  • Retention
  • How we share your personal information
  • Mobile information & SMS/RCS messaging
  • Your choices
  • Other sites and services
  • Security
  • International data transfer
  • Children
  • Changes to this Privacy Policy
  • How to contact us

Personal information we collect

The personal information we collect depends on how you interact with Rocalyn Edge. We organize this section by the type of individual the information relates to: callers, subscribers, and website visitors.

Callers and people who text a subscriber

When you call a telephone number answered by a Rocalyn Edge assistant, or send a text message to a number a subscriber uses with Rocalyn Edge, we collect the information below on behalf of the subscribing business, as described in “Our role for information from calls and messages” above:

  • Contact data — the phone number you call from and any name, email, or contact details you choose to share with the assistant.
  • Communications data — the caller-provided details of your inquiry (what you were calling about, your timeline, and preferences; for calls to a real-estate business, this includes your buyer/seller status), captured as a structured record, together with an automatically generated summary of the call and short notes of what was discussed.
  • Message data — where the business you contacted has enabled texting, the text messages you exchange with that business, including their content, together with the date and time of the message you sent first and of your reply agreeing to receive texts and a record of any request you make to stop receiving texts. Texting a business also creates a contact record for it, in the same way a call does; that record starts as your phone number and gains a name only if you give one.

What the assistant does not collect or keep. We do not record calls and we do not retain a verbatim transcript of a production call. The conversation is processed in real time; immediately after the call ends, a text transcript is used once to generate the written summary and call notes and is then discarded. A text conversation is different: text messages are written by their nature, so the messages you exchange with a business are kept as part of that business’s records, on the schedule set out under “Retention” below. The assistant is built with nondiscrimination guardrails (including fair-housing guardrails where the subscriber’s business relates to housing) and does not solicit, repeat, or retain protected-class information even if a caller volunteers it, other than noting the language the call was conducted in so the business can respond in that language.

Subscribers

When you request an invitation, create an account, or manage your subscription as a business owner or team member, we collect:

  • Contact data — your first and last name, email address, phone number, business and brand details (including brokerage details where applicable), and mailing address.
  • Service configuration data — the configuration of your assistant, such as its name, selected voice, persona, and the information about your business, services, or property you provide for it to answer from.
  • Transactional and billing data — information relating to your subscription and payments. Payment card details are collected and processed directly by our payment processor; Rocalyn does not see or store your full card number.
  • Marketing data — your preferences for receiving our communications and details about your engagement with them.

Website visitors

When you visit our website, we and our service providers may automatically log limited information, such as:

  • Device data, such as your device type, operating system and browser type, and IP address; and
  • Online activity data, such as pages viewed and access times, to keep you signed in and remember functional preferences.

We do not use advertising cookies, session-replay tools, chat widgets, ad pixels, precise geolocation, or cross-site trackers on our website. For basic traffic measurement we use cookieless, privacy-preserving page-view analytics provided by our hosting provider; this analytics does not set advertising cookies, does not use cross-site identifiers, and honors “Do Not Track” signals.

Other information. Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Tracking & other technologies

Cookies and other technologies. We use cookies and similar technologies only to keep you signed in and to remember functional preferences (such as light or dark mode). We do not use advertising cookies, cross-site trackers, or third-party analytics cookies. Most browsers let you remove or reject cookies through their settings; if you disable functional cookies, parts of the website may not work properly.

Artificial intelligence (AI) technologies. We use a third-party AI model provider on two surfaces. For inbound calls, the provider processes the call audio in real time to conduct the conversation, in-session, under a paid-tier, no-training commitment with no session-state retention. Immediately after the call, a text transcript is sent to the provider once to generate the call summary, call notes and lead record, and is then discarded. Separately, when a subscriber uploads reference documents about their business, services, or property (for example, MLS sheets and walkthrough media for a real-estate business), the provider extracts the relevant details under its data processing terms; those documents may incidentally contain personal information, such as a staff contact’s details or access instructions. We contractually require this provider to act only as our service provider/processor and prohibit it from using the information to train or improve generalized AI models; it retains only limited abuse-monitoring logs for a short period and does not use the data for training.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations. To provide, operate, secure, and support the Service; to answer callers on our subscribers’ behalf and deliver the structured lead record, call summary and notes to the subscriber; to carry text messages between a subscriber and the people who contact it, where that subscriber has enabled texting; to provision and maintain subscriber accounts; and to communicate with subscribers about the Service, including service-related announcements, security alerts, and support and administrative messages.

Service improvement. To analyze use of our website and the Service and to improve and develop our products and services.

Marketing. We may send you direct marketing communications about the Service and personalize them based on your interests. You may opt out as described in the “Your choices” section below.

Compliance and protection. To comply with applicable laws, lawful requests, and legal process; to protect our, your, or others’ rights, privacy, safety, or property; to audit our internal processes; to enforce our terms; and to prevent, identify, investigate, and deter fraudulent, harmful, or illegal activity. We maintain a structurally de-identified compliance-event log (category and escalation outcome only, never caller words) to support our nondiscrimination (including fair-housing), licensed-advice, and no-recording guardrails.

To create aggregated or de-identified data. We may create aggregated or de-identified data from personal information and use it for our lawful business purposes, and we will not attempt to reidentify it.

Retention

We generally retain personal information for as long as needed to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements, to establish or defend legal claims, and for fraud prevention. In particular:

  • Call audio and conversation content: not retained; processed in real time and then released.
  • Call records (contact, intent, appointment, call summary and notes): retained for no longer than twelve months, then purged automatically by a scheduled job. The window that applies to your account is shown in your account settings and may be shorter, never longer; a shorter window is also available on request.
  • Text conversations: where a subscriber has enabled texting, the messages exchanged with that subscriber are retained for no longer than twelve months, then purged automatically, on the same basis as call records. Texts on our own lines — the call alerts we send subscribers, replies to them, and messages sent to a Rocalyn number directly — are retained for twelve months on the same basis.
  • Messaging consent records: we keep your confirmation that you wanted a message, and the first message you send us, word for word, for four years after the last message we send you, so that we can show the message was invited. That copy is kept for the four years even though the conversation itself is purged at twelve months.
  • Message log: we keep a record of each text we send, as sent, and the consent it relied on, for four years from the date we send it.
  • Opt-out records: we keep a record of an opt-out for four years from the date you opt out. The entry that actually stops further texts is kept indefinitely, so that the opt-out keeps working, and it is kept even after the related contact record is deleted.
  • Contacts: retained while active; purged after 90 days of inactivity with no associated calls or leads.
  • Compliance-event records (category and escalation outcome only, never caller content): retained for up to four years, then purged automatically.
  • Subscriber account data: kept for the life of the account and then deleted or returned, consistent with the schedule above.

How we share your personal information

We may share your personal information with the following categories of recipients. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, each limited to what its role requires: our telephony and real-time media providers, which connect and carry calls and text messages; our AI model provider, which processes call audio in-session under a paid-tier, no-training commitment with no session-state retention; our database and storage provider, in the United States; our website and portal hosting provider; our authentication provider, which manages subscriber sign-in so that Rocalyn does not see or store your password; and our email-delivery provider for our subscriber newsletter and operational alerts, which does not process caller data.

Payment processor. Subscription payments are processed directly by our payment processor, which collects your card details directly and uses your payment data in accordance with its own privacy policy. Rocalyn does not see or store your full card number.

Authorities and others. Law enforcement, government authorities, and private parties where we believe in good faith it is necessary or appropriate to comply with law or legal process or to protect rights, privacy, safety, or property.

Professional advisors. Lawyers, auditors, bankers, and insurers, in the course of the professional services they render to us.

Business transferees. Parties to an actual or prospective corporate transaction (for example, a financing, or the sale, merger, or transfer of all or part of our business or assets), and an acquirer, successor, or assignee, in each case subject to this Privacy Policy or a successor policy.

Customer-enabled integrations. If a subscriber connects their own third-party account to the Service — for example, a scheduling tool such as Calendly or a CRM such as HubSpot — we transmit the relevant lead or contact records to that subscriber’s own account at the subscriber’s direction. Those third parties act on the subscriber’s behalf under the subscriber’s own agreement with them, not as Rocalyn’s service providers, and their use of the information is governed by their own terms and privacy policies. The available integrations may change over time.

Mobile information & SMS/RCS messaging

How we use your mobile number. When you give us a mobile number for Rocalyn Edge messaging, we use it only to send the messages described in our Terms of Service (Messaging Terms) and to honor your opt-out and support requests. When you text a number a subscriber uses with Rocalyn Edge, we use your number to pass your message to the business you contacted, to ask whether you want replies by text and confirm your answer, to send you that business’s replies, to keep the record of that conversation for the business, and to honor your opt-out and support requests. If you text a Rocalyn number directly, rather than a number a subscriber uses with Rocalyn Edge, we keep your message and the number you sent it from in our own business records so that our team can read and respond to it. We use it for that purpose only; we do not use it for marketing and do not add it to a marketing list. We do not sell your number, and we do not add it to any marketing list.

No sale or sharing for third-party marketing. No mobile information or messaging opt-in or consent will be sold or shared with third parties or affiliates for their marketing or promotional purposes. Information may be shared with subcontractors who support the messaging service (for example, our messaging carrier or aggregator) solely to deliver the messages you have requested. Text-messaging opt-in data and consent are excluded from all other sharing.

Frequency, rates, and opt-out. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP — we also honor STOPALL, END, QUIT, CANCEL, UNSUBSCRIBE, OPTOUT and REVOKE, and you can tell us, or the business you contacted, in any other reasonable way — or reply HELP for help. Opting out of texts from a number stops every text from that number. Numbers used by businesses in the same line of business share one registered messaging program, so opting out also stops texts from those other businesses; it does not affect a different line of business. See our Terms of Service for full details.

Retention. We retain mobile numbers and a record of consent and opt-out as needed to operate the service, prove consent, honor opt-outs, prevent abuse, and meet legal obligations.

Your choices

Access or update your information. If you have a subscriber account, you may review and update certain account information by logging in.

Opt out of communications. You may opt out of marketing emails using the unsubscribe link in the email or by contacting us; you may continue to receive service-related messages. If you receive text messages from us, you may opt out by replying STOP; we also honor STOPALL, END, QUIT, CANCEL, UNSUBSCRIBE, OPTOUT and REVOKE, and you can tell us, or the business you contacted, in any other reasonable way. Opting out of texts from a number stops every text from that number, and also stops texts from other businesses that share the same registered messaging program; it does not affect a different line of business.

Cookies. Most browsers let you remove or reject cookies through their settings, as described in “Tracking & other technologies” above.

Do Not Track. Some browsers offer a “Do Not Track” (DNT) signal, and some browsers or extensions send a Global Privacy Control (GPC) signal. Our page-view analytics honors both: when your browser sends a DNT or GPC signal, we drop the associated analytics events. Because we do not sell or share personal information for cross-context behavioral advertising, a GPC signal has nothing further to opt out of.

Declining to provide information. We need certain information to provide the Service; if you do not provide information we identify as required, we may not be able to provide it.

Delete your content or close your account. You can ask us to access, correct, or delete the information we have about you, or close your account, by contacting privacy@rocalynedge.com. In practice, we honor access and deletion requests from any individual, regardless of where they live.

Other sites and services

The Service may link to websites and services operated by third parties. We do not control and are not responsible for their practices; we encourage you to read their privacy policies.

Security

We employ technical, organizational, and physical safeguards designed to protect the personal information we collect, including encryption in transit (TLS 1.2 or higher) and at rest (AES-256), and de-identified operational logs (phone numbers tokenized; conversation content never written to logs). Rocalyn is working toward SOC 2 compliance and today builds on SOC 2-audited infrastructure providers. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

International data transfer

We are based in the United States and store personal information in the United States. Some real-time processing during a live call — specifically media transport and AI model inference — may take place outside the United States. For media transport, region restriction is available from our provider only on a higher service tier than the one we use, and is not enabled; for AI model inference, our provider offers no region control. This is transient processing only: calls are not recorded, and no personal information is retained or stored outside the United States, with two qualifications. For one of those surfaces our AI model provider keeps limited abuse-monitoring records for a short period and does not publish the region in which they are held; for the other, we have obtained an exception and no such records are kept. And our database provider is a non-US company whose support staff are distributed worldwide, so information stored in the United States may be accessed from outside the United States by its support personnel, under contractual access controls. We will update this section if either position changes.

Children

The Service is a business tool for owner-operated US businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18, and specifically do not knowingly collect, sell, or share the personal information of anyone under 16.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will update the effective date and post the modified policy on the Service or by other appropriate means, and, for changes affecting subscribers, notify them through the Service or by email. Your use of the Service after the effective date indicates your acknowledgment of the modified Privacy Policy.

How to contact us