Privacy Policy

Effective Date: May 15, 2026·Last Updated: May 15, 2026

This Privacy Policy describes how Rocky AI LLC (“Rocky AI,” “we,” “us,” or “our”) collects, uses, and protects information when you use Rocky. We take your privacy seriously. This policy is written in plain English where the law allows, and formal where it has to be.

1. What We Collect

Information You Provide

• Account information: your name, email address, and password when you create an account.
• Deal data: property addresses, financial figures, offer terms, and other information you input is stored in your private deal memory database. This data is used exclusively to power your Rocky experience — pattern recognition, outcome tracking, and deal history. We do not access, analyze, or aggregate individual users’ deal data for our own purposes.
• Communications: any messages you send us via email or through Rocky’s feedback system.
• Payment information: processed by Stripe. We do not store your credit card number — Stripe handles all payment data.

Information Collected Automatically

• Usage data: which features you use, how often, and general interaction patterns.
• Technical data: browser type, device type, IP address, and session information for security and debugging.
• API usage: token counts and cost data for internal cost tracking — aggregated, not linked to your personal identity in reports.

What We Do Not Collect

• We do not sell, share, or analyze your deal pipeline data. Your deals are yours.
• We do not knowingly collect Social Security numbers, government IDs, bank account numbers, full dates of birth, tenant screening reports, protected-class information, or confidential third-party data.
• We do not collect data from third parties about you without your knowledge.
• We do not run advertising or allow advertisers to collect data through Rocky.

Please Do Not Upload

To protect you and the people described in your deals, please do not paste, upload, or otherwise submit the following into Rocky:

• Social Security numbers, taxpayer identification numbers, or government-issued ID numbers.
• Bank account numbers, routing numbers, full credit card numbers, or other financial account credentials.
• Full dates of birth.
• Tenant screening reports, credit reports, background check results, or eviction records identifying a tenant by name.
• Protected-class information about a tenant, seller, or third party (race, religion, national origin, disability, familial status, etc.).
• Confidential business information of a third party that you are not authorized to share.

If you accidentally submit any of the above, contact us at rocky@userocky.com and we will work with you to remove it.

2. How We Use Your Information

• To provide and operate the Rocky service.
• To monitor system performance and maintain security. Troubleshooting is limited to system logs and does not include access to your deal data unless you submit and authorize a formal request for hands-on support.
• To send you the Rocky newsletter if you have subscribed — you can unsubscribe at any time.
• To process your subscription and manage billing via Stripe.
• To respond to support requests and communicate with you about your account.
• To track aggregate usage for internal cost management — never sold or shared.

3. Your Deal Data

This is the most important section for most Rocky users.

• Your deal data belongs to you. We do not claim ownership of any deals, analyses, or documents you create using Rocky.
• Your deal data is stored in an isolated per-user database. Other Rocky users cannot see your deals.
• We do not use your deal data to train AI models — not ours, not Anthropic’s, not anyone else’s.
• You can request deletion of all your deal data at any time. We will process active-data deletion requests within 30 days. See Section 6 (Data Retention) for backup-related details.

4. How We Share Your Information

We do not sell your personal information. Period.

We share information only in the following limited circumstances, and only as needed to operate Rocky:

• Anthropic (AI processor): Rocky’s analysis is powered by the Anthropic Claude API. When you submit a deal, the relevant content of your message is transmitted to Anthropic to generate Rocky’s response. Under Anthropic’s Commercial Terms of Service, which govern API use, Anthropic does not train its models on customer content (inputs or outputs). Anthropic retains API content for a limited period for abuse monitoring and operational purposes in accordance with its Commercial Terms and Privacy Policy, available at anthropic.com/legal.
• Stripe (payment processor): subscription billing and payment data. Stripe’s privacy policy governs Stripe’s handling of payment data.
• Beehiiv (newsletter platform): if you subscribe to the Rocky newsletter, your name and email are stored with Beehiiv to deliver the newsletter.
• Email infrastructure (Hostinger SMTP): transactional email (verification, password reset, trial reminders, welcome messages) is sent through our SMTP provider.
• Hosting infrastructure: Rocky is deployed on a virtual private server provided by our hosting vendor. The vendor has access to the server only as necessary to provide hosting services.
• Legal requirements: we may disclose information if required by law, court order, subpoena, or to protect the rights, property, or safety of Rocky AI LLC, our users, or others.

5. Data Security

• Your deal data is stored on a secured VPS with access controls and encryption in transit (HTTPS).
• Data stored on our servers is not encrypted at the disk level. Security relies on access controls, authentication, and encrypted backups.
• Passwords are hashed with bcrypt — we cannot see your password.
• We do not store payment card data — Stripe handles all payment security.
• We maintain regular encrypted backups of user data.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at rocky@userocky.com.

In the event of a breach of unencrypted personal information that triggers notification obligations under the North Carolina Identity Theft Protection Act (N.C. Gen. Stat. § 75-65) or other applicable law, we will notify affected users and applicable authorities in accordance with that law’s requirements.

6. Data Retention

• Active account data is retained for the duration of your subscription plus 90 days after cancellation.
• You may request deletion of your active data at any time — we will process within 30 days.
• Backups: deleted data may persist in encrypted backup snapshots until those backups are overwritten or expired in the normal course of our backup retention schedule (typically within 90 days of deletion). Backups are accessed only to restore service in case of system failure or data loss.
• Aggregate usage data with no personal identifiers may be retained indefinitely for internal analysis.
• Payment records are retained as required by applicable law and Stripe’s policies.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your data (subject to the backup retention timeline above).
• Unsubscribe from the newsletter at any time via the unsubscribe link in any issue.
• Export your deal data in a readable format upon request.

To exercise any of these rights, contact us at rocky@userocky.com.

8. Cookies and Tracking

Rocky’s web interface uses minimal cookies and similar storage necessary for session management and authentication (specifically, session storage to hold your authentication token while you are logged in). Stripe Checkout, when used, sets its own cookies as part of the payment flow; Stripe’s privacy policy governs those cookies. Beehiiv’s newsletter sign-up form may set cookies governed by Beehiiv’s privacy policy.

We do not use advertising cookies or third-party advertising trackers. You can disable cookies and similar storage in your browser settings, but this may affect your ability to stay logged in.

9. Children’s Privacy

Rocky is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email to your registered address at least 14 days before they take effect. The current version is always available at userocky.com.

11. Contact

Questions about this Privacy Policy? Contact us:

Rocky AI LLC

rocky@userocky.com

userocky.com