Privacy Policy

Effective as of July 26, 2026.

Rocalyn LLC (“Rocalyn,” “we,” “us” or “our”) provides an AI-powered virtual assistant that answers inbound telephone calls for licensed real-estate professionals (the “Service”). This Privacy Policy describes how we process personal information that we collect through our website and online properties that link to this Privacy Policy, our marketing activities, and the operation of the Service.

Our role for information from calls. When our assistant answers a call, the structured record it creates is processed on behalf of, and on the instructions of, the subscribing real-estate professional or brokerage, who is the controller/business for that record. This Privacy Policy does not govern our processing of that caller information on our subscribers’ behalf; if you are a caller with questions or concerns about a record held by the professional you called, please direct them to that professional. This Privacy Policy governs the information for which Rocalyn is the controller — principally our subscribers’ account information and our website data. Please see the “Your choices” section below for the choices we offer to users directly, regardless of jurisdiction.

Index

  • Personal information we collect
  • Tracking & other technologies
  • How we use your personal information
  • Retention
  • How we share your personal information
  • Mobile information & SMS/RCS messaging
  • Your choices
  • Other sites and services
  • Security
  • International data transfer
  • Children
  • Changes to this Privacy Policy
  • How to contact us

Personal information we collect

The personal information we collect depends on how you interact with Rocalyn Edge. We organize this section by the type of individual the information relates to: callers, subscribers, and website visitors.

Callers

When you call a telephone number answered by a Rocalyn Edge assistant, we collect the information below on behalf of the subscribing real-estate professional, as described in “Our role for information from calls” above:

  • Contact data — the phone number you call from and any name, email, or contact details you choose to share with the assistant.
  • Communications data — the caller-provided details of your inquiry (what you were calling about, your buyer/seller status, timeline, and preferences), captured as a structured record, together with an automatically generated summary of the call.

What the assistant does not collect or keep. Calls are not recorded and no verbatim transcript of a production call is retained; the conversation is processed in real time and released when the call ends. The assistant is built with fair-housing guardrails and does not solicit, repeat, or retain protected-class information even if a caller volunteers it.

Subscribers

When you request an invitation, create an account, or manage your subscription as a real-estate professional or team member, we collect:

  • Contact data — your first and last name, email address, phone number, brokerage and brand details, and mailing address.
  • Service configuration data — the configuration of your assistant, such as its name, selected voice, persona, and the listing information you provide for it to answer from.
  • Transactional and billing data — information relating to your subscription and payments. Payment card details are collected and processed directly by our payment processor; Rocalyn does not see or store your full card number.
  • Marketing data — your preferences for receiving our communications and details about your engagement with them.

Website visitors

When you visit our website, we and our service providers may automatically log limited information, such as:

  • Device data, such as your device type, operating system and browser type, and IP address; and
  • Online activity data, such as pages viewed and access times, to keep you signed in and remember functional preferences.

We do not use advertising cookies, session-replay tools, chat widgets, ad pixels, precise geolocation, or cross-site trackers on our website. For basic traffic measurement we use cookieless, privacy-preserving page-view analytics provided by our hosting provider; this analytics does not set advertising cookies, does not use cross-site identifiers, and honors “Do Not Track” signals.

Other information. Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Tracking & other technologies

Cookies and other technologies. We use cookies and similar technologies only to keep you signed in and to remember functional preferences (such as light or dark mode). We do not use advertising cookies, cross-site trackers, or third-party analytics cookies. Most browsers let you remove or reject cookies through their settings; if you disable functional cookies, parts of the website may not work properly.

Artificial intelligence (AI) technologies. We use a third-party AI model provider on two surfaces. For inbound calls, the provider processes the call audio in real time to generate the structured summary and lead record, in-session, under a paid-tier, no-training commitment with no session-state retention. Separately, when a subscriber uploads listing documents (such as MLS sheets or walkthrough media), the provider extracts listing details under its data processing terms; those documents may incidentally contain personal information, such as a listing agent’s contact details or showing instructions. We contractually require this provider to act only as our service provider/processor and prohibit it from using the information to train or improve generalized AI models; it retains only limited abuse-monitoring logs for a short period and does not use the data for training.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations. To provide, operate, secure, and support the Service; to answer callers on our subscribers’ behalf and deliver the structured lead record and call summary to the subscribing professional; to provision and maintain subscriber accounts; and to communicate with subscribers about the Service, including service-related announcements, security alerts, and support and administrative messages.

Service improvement. To analyze use of our website and the Service and to improve and develop our products and services.

Marketing. We may send you direct marketing communications about the Service and personalize them based on your interests. You may opt out as described in the “Your choices” section below.

Compliance and protection. To comply with applicable laws, lawful requests, and legal process; to protect our, your, or others’ rights, privacy, safety, or property; to audit our internal processes; to enforce our terms; and to prevent, identify, investigate, and deter fraudulent, harmful, or illegal activity. We maintain a structurally de-identified compliance-event log (category and escalation outcome only, never caller words) to support our fair-housing, licensed-advice, and no-recording guardrails.

To create aggregated or de-identified data. We may create aggregated or de-identified data from personal information and use it for our lawful business purposes, and we will not attempt to reidentify it.

Retention

We generally retain personal information for as long as needed to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements, to establish or defend legal claims, and for fraud prevention. In particular:

  • Call audio and conversation content: not retained; processed in real time and then released.
  • Structured call records (contact, intent, appointment): retained on a window set by the subscriber’s plan — 90 days on Solo, and 12 months on Premium and above — then purged automatically by a scheduled job; a shorter window is available on request, and the plan window is the maximum.
  • Contacts: retained while active; purged after 90 days of inactivity with no associated calls or leads.
  • Compliance-event records (category and escalation outcome only, never caller content): retained for up to four years, then purged automatically.
  • Subscriber account data: kept for the life of the account and then deleted or returned, consistent with the schedule above.

How we share your personal information

We may share your personal information with the following categories of recipients. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, each limited to what its role requires: our telephony and real-time media providers, which connect and carry the call; our AI model provider, which processes call audio in-session under a paid-tier, no-training commitment with no session-state retention; our database and storage provider, in the United States; our website and portal hosting provider; our authentication provider, which manages subscriber sign-in so that Rocalyn does not see or store your password; and our email-delivery provider for our subscriber newsletter and operational alerts, which does not process caller data.

Payment processor. Subscription payments are processed directly by our payment processor, which collects your card details directly and uses your payment data in accordance with its own privacy policy. Rocalyn does not see or store your full card number.

Authorities and others. Law enforcement, government authorities, and private parties where we believe in good faith it is necessary or appropriate to comply with law or legal process or to protect rights, privacy, safety, or property.

Professional advisors. Lawyers, auditors, bankers, and insurers, in the course of the professional services they render to us.

Business transferees. Parties to an actual or prospective corporate transaction (for example, a financing, or the sale, merger, or transfer of all or part of our business or assets), and an acquirer, successor, or assignee, in each case subject to this Privacy Policy or a successor policy.

Customer-enabled integrations. If a subscriber connects their own third-party account to the Service — for example, a scheduling tool such as Calendly or a CRM such as HubSpot — we transmit the relevant lead or contact records to that subscriber’s own account at the subscriber’s direction. Those third parties act on the subscriber’s behalf under the subscriber’s own agreement with them, not as Rocalyn’s service providers, and their use of the information is governed by their own terms and privacy policies. The available integrations may change over time.

Mobile information & SMS/RCS messaging

How we use your mobile number. When you give us a mobile number for Rocalyn Edge messaging, we use it only to send the messages described in our Terms of Service (Messaging Terms) and to honor your opt-out and support requests.

No sale or sharing for third-party marketing. No mobile information or messaging opt-in or consent will be sold or shared with third parties or affiliates for their marketing or promotional purposes. Information may be shared with subcontractors who support the messaging service (for example, our messaging carrier or aggregator) solely to deliver the messages you have requested. Text-messaging opt-in data and consent are excluded from all other sharing.

Frequency, rates, and opt-out. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP, or reply HELP for help. See our Terms of Service for full details.

Retention. We retain mobile numbers and a record of consent and opt-out as needed to operate the service, prove consent, honor opt-outs, prevent abuse, and meet legal obligations.

Your choices

Access or update your information. If you have a subscriber account, you may review and update certain account information by logging in.

Opt out of communications. You may opt out of marketing emails using the unsubscribe link in the email or by contacting us; you may continue to receive service-related messages. If you receive text messages from us, you may opt out by replying STOP.

Cookies. Most browsers let you remove or reject cookies through their settings, as described in “Tracking & other technologies” above.

Do Not Track. Some browsers offer a “Do Not Track” (DNT) signal, and some browsers or extensions send a Global Privacy Control (GPC) signal. Our page-view analytics honors both: when your browser sends a DNT or GPC signal, we drop the associated analytics events. Because we do not sell or share personal information for cross-context behavioral advertising, a GPC signal has nothing further to opt out of.

Declining to provide information. We need certain information to provide the Service; if you do not provide information we identify as required, we may not be able to provide it.

Delete your content or close your account. You can ask us to access, correct, or delete the information we have about you, or close your account, by contacting privacy@rocalynedge.com. In practice, we honor access and deletion requests from any individual, regardless of where they live.

Other sites and services

The Service may link to websites and services operated by third parties. We do not control and are not responsible for their practices; we encourage you to read their privacy policies.

Security

We employ technical, organizational, and physical safeguards designed to protect the personal information we collect, including encryption in transit (TLS 1.2 or higher) and at rest (AES-256), and de-identified operational logs (phone numbers tokenized; conversation content never written to logs). Rocalyn is working toward SOC 2 compliance and today builds on SOC 2-audited infrastructure providers. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

International data transfer

We are based in the United States and store personal information in the United States. Some real-time processing during a live call — specifically media transport and AI model inference — may take place outside the United States, because two of our service providers do not currently support restricting processing to a specific region. This is transient processing only: calls are not recorded, and no personal information is retained or stored outside the United States.

Children

The Service is a business tool for licensed real-estate professionals and is not directed to children. We do not knowingly collect personal information from anyone under 18, and specifically do not knowingly collect, sell, or share the personal information of anyone under 16.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will update the effective date and post the modified policy on the Service or by other appropriate means, and, for changes affecting subscribers, notify them through the Service or by email. Your use of the Service after the effective date indicates your acknowledgment of the modified Privacy Policy.

How to contact us