Privacy Policy

Last updated: October 1, 2026

This policy explains how OA Partners LLC ("we", "us") handles personal data in connection with our software for AI agents that hold voice, video and text conversations (the "Service").

1. Two different roles

  • Business users. If you have an account with us, or visit our own pages, we decide how your data is used. For that data we are the "controller", and this policy applies in full.
  • People who talk to an agent, fill in a form or book a time with one of our business customers. That business decides what is collected and why. It is the controller, and we handle your data on its behalf as its "processor". The business's own privacy notice applies, and requests about your data should go to that business first. Section 9 explains more.

2. Data we collect

From business users

  • Account details: name, email, password (stored hashed by our login provider), business name and profile, team members.
  • Billing and usage: credit balance, purchases, and usage records such as call minutes, chat sessions, emails and AI generation.
  • Content you create: agents, prompts, knowledge base documents, widgets, templates, message sequences and settings.
  • Support: help chat messages, bug reports and the screenshots or screen recordings you choose to attach, feature requests and votes.
  • Technical data: IP address, approximate country derived from it, browser and device type, pages viewed, and log data.
  • Session replay: a recording of how the dashboard is used (clicks, scrolling, page content, with text typed into fields masked). Not collected from visitors in the European Economic Area, the United Kingdom or Switzerland.

On behalf of our customers (their leads and visitors)

  • Contact details and answers given in forms: name, email, phone, website, and any questions the business asks.
  • Calls: audio recordings, camera video where the camera is on, the transcript, call time and length, and AI-generated summaries, extracted answers and evaluations.
  • Messages: texts and emails sent and received, delivery status, opens, and opt-outs.
  • Bookings: chosen time, time zone, attendance status, reschedules and cancellations.
  • Widget activity: views and clicks, a visitor identifier used for counting and for showing a consistent version of a widget, the device's time zone and approximate country.
  • Technical data: IP address (used for security, bot protection and country detection), browser type.

We do not ask for sensitive categories of data (such as health or biometric identification data) and do not use voice or video to identify people. Businesses must not use the Service to collect such data without our agreement.

3. How we use data

  • To provide the Service: run calls and conversations, transcribe and analyze them, store leads, take bookings, send follow-ups and reminders, show analytics, and handle billing.
  • To keep it secure: prevent fraud, abuse and automated traffic, and investigate incidents.
  • To support users and fix problems, including by reviewing session replays and bug reports.
  • To understand and improve the Service, including by analyzing usage and creating aggregated or de-identified data that no longer identifies anyone.
  • To communicate with business users: service and account messages, and news about our own products, which you can opt out of.
  • To meet legal obligations and to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for third-party advertising.

For data we control, we rely on: performing our contract with you (running your account and the Service); our legitimate interests (security, support, improving the Service, and marketing our own products to business users), balanced against your rights; consent where the law requires it; and legal obligations. For data we process on behalf of a business, that business determines the legal basis.

5. AI and automated processing

Conversations are carried out and analyzed by AI systems. Content of conversations, leads' details and the business's settings are sent to AI model providers to generate speech, replies, summaries and follow-up messages. These systems do not make decisions with legal or similarly significant effects about individuals on our behalf; any decision about a lead is the business's.

6. Who we share data with

  • Service providers that process data for us under contract, in these categories: voice and conversational AI, AI avatars, AI language models, cloud hosting and databases, text messaging and telephony, email delivery, product analytics and session replay, security and bot protection, error monitoring, and payments. A current list of the providers that handle customer data is in our Data Processing Addendum.
  • The business a lead interacted with, which sees that lead's data in its account, and any tools that business connects (for example through webhooks).
  • Authorities or other parties where required by law, or to protect rights, safety and security.
  • A successor in a merger, acquisition, financing or sale of assets, subject to this policy.

7. International transfers

We and our providers operate in the United States and other countries. When personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum), or on a provider's participation in the EU-U.S. Data Privacy Framework where applicable.

8. How long we keep data

  • Account data: for the life of the account and a reasonable period afterwards for legal, tax and security purposes.
  • Customer data (leads, recordings, transcripts, messages, bookings): until the business deletes it or its account is closed, after which it is deleted within a reasonable period, subject to backups and to retention periods at our providers.
  • Session replays, logs and support material: for limited periods needed for the purposes above.
  • Aggregated or de-identified data may be kept without limit.

9. If you spoke with an agent or filled in a form

The business whose agent, form or booking page you used controls your data. To access, correct or delete it, or to object to its use, contact that business. If you contact us instead, we will pass your request to the business or tell you how to reach it, and we will help the business respond. You can stop texts by replying STOP and stop emails with the unsubscribe link in any email.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to restrict or object to its use, to withdraw consent, and to complain to your data protection authority. Residents of some U.S. states have similar rights, including the right to appeal a refused request; we do not sell or share personal data for cross-context behavioral advertising. To use your rights over data we control, write to hello@gorocketapp.com. We will not treat you differently for doing so.

11. Cookies and similar technologies

  • Essential: cookies and local storage that keep you signed in, remember the selected business, protect against automated abuse, and keep a call or booking working.
  • Preferences: saved table columns, list sorting and unsent drafts, stored in your browser.
  • Widget statistics: outside the EEA, UK and Switzerland, a random first-party identifier is stored so that a visitor keeps seeing the same version of a widget and is counted once. For visitors in those regions nothing is stored on the device; a short-lived identifier that changes daily is calculated on our servers instead.
  • Session replay: described in section 2; not used for visitors in the EEA, UK or Switzerland.

We do not use advertising cookies. A business may add its own code or tracking to its widgets; that is the business's responsibility and is covered by its own notice.

12. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and separation of each business's data. No system is completely secure, and we cannot guarantee absolute security.

13. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

14. Changes

We may update this policy. The date above shows the latest version, and significant changes will be flagged in the Service.

15. Contact

OA Partners LLC, 8 The Green, Dover, DE 19901, USA. Email: hello@gorocketapp.com