Privacy Policy

Effective date: October 1, 2026

This policy describes how Rockridge handles information in connection with rockridge.ai, business inquiries, meeting bookings, and customer support services that a business authorizes Rockridge to operate. Contact us at hello@rockridge.ai about this policy or your information.

Information we collect

• Information you provide: your name, email address, company, meeting details, and information you choose to send when you email us or book a call. Please avoid sending passwords, payment card numbers, or sensitive customer records in an initial inquiry.
• Pricing chat and cost review: the messages you send in the chat on our pricing page, and the answers you give there or in the cost review form, such as your work email, who handles your support, the agency or helpdesk you use, and your rough ticket volume and support spend. We keep the chat conversation so we can reply to it and prepare your cost review.
• Website and technical information: hosting and security systems may process IP addresses, requested URLs, browser and device information, timestamps, and request logs. We also measure visits with a first-party, randomly generated visitor identifier and a session identifier, and record pages viewed and actions taken (such as opening, advancing through, or leaving the cost review form), together with referral and limited campaign information. Analytics measures page visits, referral information, approximate location, device/browser categories, and clicks on booking links.
• Personalized invitation pages: a page may display a recipient's name, company, and a personalized message or image. The page identifier is sent to our application to retrieve that content. Anyone with the link may be able to view it; contact us to request its removal.

How we use information

We use information to respond to inquiries, arrange and follow up on meetings, discuss our services, deliver requested pages, understand website usage, improve the site, prevent misuse, and handle legal obligations or disputes.

Service providers and sharing

We use Vercel for website hosting and Web Analytics, and PostHog for product analytics on public marketing pages. Booking links lead to Google Calendar, and some pages request fonts and platform icons from Google. These requests disclose technical information such as your IP address and browser information to the provider. Email and scheduling providers process the messages and booking details sent through their services. Replies in the pricing chat are written by an AI model provider, which processes the messages you send there, and our application and database providers store chat conversations and cost review answers.

Providers may process information on our behalf and under their own applicable terms and privacy notices. See Vercel's privacy notice, PostHog's privacy policy, and Google's privacy policy. Third-party destinations may associate activity with an existing account and collect activity across other websites or services under their policies.

We may disclose information where reasonably necessary to comply with law, protect rights and security, or address a dispute, and in connection with a business transfer subject to applicable protections.

Analytics, first-party measurement, and privacy signals

We measure visits in two ways. Vercel Web Analytics uses a request-derived identifier rather than analytics cookies, and we remove query strings and URL fragments from analytics page URLs and replace personalized page paths with a generic path. Separately, our own first-party measurement stores a random, opaque visitor identifier in your browser's local storage and a session identifier in session storage, and records the pages and actions in a visit, such as opening, advancing through, or leaving the cost review form. It also keeps the landing page, the origin of the referring page, and limited campaign or ad-click parameters. This lets us understand where visitors drop off and connect a visit to an inquiry. This first-party data is not sold or shared with advertisers and contains no form answers, email addresses, or chat messages. Hosting logs and requests to other providers are separate from these settings.

Public marketing pages also use PostHog, a third-party product analytics service, to understand how visitors use the site and where they drop off. PostHog receives page views, clicks, mouse movements and scrolling, and technical information such as browser, device, and approximate location, and stores a random analytics identifier in your browser's local storage. It also records masked session replays of visits to public marketing pages so we can see how people interact with the site. Form fields are masked and their values are not recorded, and we configure PostHog without identifying individual visitors. We strip query strings and URL fragments from the pages it records, and we do not send form answers, email addresses, or chat messages to it. PostHog processes this data under its own terms.

Public informational and marketing pages also use the Google Ads tag for advertising measurement. Google may use advertising cookies and click identifiers to connect ad clicks with completed cost review submissions, and receives technical information such as your IP address and browser information. Personalized advertising and enhanced conversions are disabled in our tag configuration. We preserve Google click and linker identifiers in the page URL supplied to the tag while removing other query parameters and fragments, and limit the supplied referrer to its origin. The tag is not installed on personalized outreach pages. We do not send cost review answers or chat messages to this tag.

When your browser sends Global Privacy Control or an enabled Do Not Track signal, we do not load third-party Web Analytics, PostHog, or the Google Ads tag and do not send personalized-page data. Our own first-party measurement described above continues so we can operate and improve the site and follow up on inquiries, and it remains limited to the data described here. These browser settings do not prevent essential hosting requests or control third-party websites you visit. You can also manage cookies and other site permissions in your browser, and you can ask us to delete information as described below.

Retention and security

Retention depends on the information and purpose, including handling an inquiry, maintaining a business relationship, resolving disputes, and meeting legal requirements. Provider logs and backups may follow different retention schedules. You can contact us to ask about retention or request deletion of information relating to you. No internet service or transmission can be guaranteed completely secure.

Your choices and requests

Email hello@rockridge.ai to request access to, correction of, or deletion of your information, or to ask us to stop promotional follow-up. Depending on your location and applicable law, you may have additional rights, including objection, restriction, portability, appeal, or a complaint to a privacy regulator. We may need to verify your identity and may retain information where law permits or requires it. Please provide enough context to locate the information without sending sensitive identification documents in your initial email.

Customer support services

When a business authorizes Rockridge to operate customer support, Rockridge may process customer messages, account identifiers, conversation metadata, order context, operator replies, delivery status, and audit records needed to provide that service. Rockridge uses this information to receive and route requests, show conversation history, prepare and send human-approved responses, prevent duplicate work, troubleshoot delivery, secure the service, and provide support reporting to the authorizing business.

Rockridge acts for the business that authorized the support workflow. That business remains responsible for its own customer-facing privacy notice and instructions. If your request concerns an order or support conversation with a brand, contact that brand first so Rockridge can coordinate with it. Rockridge does not sell customer support conversation data and does not use it to train general-purpose AI models.

Instagram messaging and comment integration

A business may connect an Instagram professional account to Rockridge through Meta's official Instagram API. Rockridge requests only the permissions needed to identify the connected professional account, receive customer-initiated Instagram messages and comments through webhooks, display those conversations and comments to authorized support operators, send operator-approved message replies, and let authorized operators manage or reply to comments.

For this integration, Rockridge may process Instagram-scoped user identifiers, usernames and display names made available by Meta, message or comment text and supported attachments, message, conversation, media, and comment identifiers, timestamps, delivery events, and the connected business account's authorization token. Authorization tokens are stored encrypted and are used only to operate the account authorized by the business. Rockridge does not ask for or store the Instagram account password.

Instagram messaging data may be available to the business that connected the account, its authorized Rockridge operators, and service providers that host, secure, store, or help operate the support dashboard. Meta processes Instagram information under Meta's own terms and privacy policy. Rockridge does not use this integration for unsolicited outreach, following, liking, posting, or other unrelated Instagram activity.

Instagram data deletion and deauthorization

An authorized business can disconnect Rockridge from its Instagram settings. Meta may also send Rockridge a deauthorization or data-deletion request. When Rockridge receives a valid request, it disables the matching Instagram connection, removes the stored authorization token, and redacts or deletes related support data where required. Limited records may be retained when reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or backup integrity.

To request access to or deletion of Instagram-related data processed by Rockridge, email hello@rockridge.ai. Include the Instagram username, the business that operated the support account, and enough context to locate the conversation. Do not send passwords or government identification in the initial request. Rockridge may need to verify the request and coordinate with the business that authorized the support workflow.

Our Reddit integration privacy policy describes the separate Reddit integration.

Changes to this policy

We will post updates on this page and change the date above. For material changes, we will provide a prominent website notice or contact affected people directly where appropriate or required by law.