Privacy Policy

Last updated: October 20, 2026

This policy explains how OA Partners LLC ("we", "us") handles personal data in connection with our software for AI agents that hold voice, video and text conversations (the "Service").

1. Two different roles

Business users. If you have an account with us, or visit our own pages, we decide how your data is used. For that data we are the "controller", and this policy applies in full.
People who talk to an agent, fill in a form or book a time with one of our business customers. That business decides what is collected and why. It is the controller, and we handle your data on its behalf as its "processor". The business's own privacy notice applies, and requests about your data should go to that business first. Section 9 explains more.

2. Data we collect

From business users

Account details: name, email, password (stored hashed by our login provider), business name and profile, team members.
Billing and usage: credit balance, purchases, and usage records such as call minutes, chat sessions, emails and AI generation.
Content you create: agents, prompts, knowledge base documents, widgets, templates, message sequences and settings.
Support: help chat messages, bug reports and the screenshots or screen recordings you choose to attach, feature requests and votes.
AI access: the AI apps you connect to your account, and a record of what they and the in-app AI Assistant looked up or changed, including the earlier version of anything they changed so you can undo it.
Technical data: IP address, approximate country derived from it, browser and device type, pages viewed, and log data.
Session replay: a recording of how the dashboard is used (clicks, scrolling, page content, with text typed into fields masked). Not collected from visitors in the European Economic Area, the United Kingdom or Switzerland.
Affiliate program, if you take part: your referral code; the clicks, sign-ups and customers credited to you; your commissions and payouts; the invite emails you send; and the payout details you give us (name, company, address, bank account and tax details; account and tax numbers are stored encrypted).

From people referred by our customers

If a customer invites you, or you open their referral link: your email address (when you are invited or sign up), the visit through the link, and whether you became a customer. We use this to send the invite and up to two reminders, and to credit the customer who referred you. Every invite email has an unsubscribe link.

On behalf of our customers (their leads and visitors)

Contact details and answers given in forms: name, email, phone, website, and any questions the business asks.
Calls: audio recordings, camera video where the camera is on, the transcript, call time and length, and AI-generated summaries, extracted answers and evaluations. When a business turns on its agent's vision tools: still images of the visitor's shared screen or camera, taken when the agent looks, sent to an AI language model provider to be described to the agent and not stored.
Messages: texts and emails sent and received, delivery status, opens, and opt-outs.
Bookings: chosen time, time zone, attendance status, reschedules and cancellations.
Widget activity: views and clicks, a visitor identifier used for counting and for showing a consistent version of a widget, the device's time zone and approximate country.
Technical data: IP address (used for security, bot protection and country detection), browser type.

We do not ask for sensitive categories of data (such as health or biometric identification data) and do not use voice or video to identify people. Businesses must not use the Service to collect such data without our agreement.

3. How we use data

To provide the Service: run calls and conversations, transcribe and analyze them, store leads, take bookings, send follow-ups and reminders, show analytics, and handle billing.
To keep it secure: prevent fraud, abuse and automated traffic, and investigate incidents.
To support users and fix problems, including by reviewing session replays and bug reports.
To understand and improve the Service, including by analyzing usage and creating aggregated or de-identified data that no longer identifies anyone.
To communicate with business users: service and account messages, and news about our own products, which you can opt out of.
To meet legal obligations and to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for third-party advertising.

4. Legal bases (EEA, UK and Switzerland)

For data we control, we rely on: performing our contract with you (running your account and the Service); our legitimate interests (security, support, improving the Service, and marketing our own products to business users), balanced against your rights; consent where the law requires it; and legal obligations. For data we process on behalf of a business, that business determines the legal basis.

5. AI and automated processing

Conversations are carried out and analyzed by AI systems. Content of conversations, leads' details and the business's settings are sent to AI model providers to generate speech, replies, summaries and follow-up messages. These systems do not make decisions with legal or similarly significant effects about individuals on our behalf; any decision about a lead is the business's.

Where it is switched on, the in-app AI Assistant can read the account you have open, including leads' details and conversations, to answer your questions, and it can propose changes that are made only after you approve them. You can also connect an AI app of your own choosing (for example Claude or ChatGPT) to your account. It then acts as you: it can read and change what you can, except for actions we keep in the dashboard, such as messaging leads or deleting data. The data it receives is handled by that app's provider under its own terms, not ours, and you can disconnect it at any time.

Service providers that process data for us under contract, in these categories: voice and conversational AI, AI avatars, AI language models, cloud browsers (used when an agent shows web pages during a meeting), cloud hosting and databases, text messaging and telephony, email delivery, website content retrieval (used to read a business's website when setting up its agents), IP-based location lookup and content delivery for the meeting page, product analytics and session replay, security and bot protection, error monitoring, customer relationship management and marketing automation, and payments. A current list of the providers that handle customer data is in our Data Processing Addendum.
The business a lead interacted with, which sees that lead's data in its account, and any tools that business connects (for example through webhooks, or an AI app connected to its account).
Authorities or other parties where required by law, or to protect rights, safety and security.
A successor in a merger, acquisition, financing or sale of assets, subject to this policy.

7. International transfers

We and our providers operate in the United States and other countries. When personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum), or on a provider's participation in the EU-U.S. Data Privacy Framework where applicable.

8. How long we keep data

Account data: for the life of the account and a reasonable period afterwards for legal, tax and security purposes.
Customer data (leads, recordings, transcripts, messages, bookings): until the business deletes it or its account is closed, after which it is deleted within a reasonable period, subject to backups and to retention periods at our providers.
Session replays, logs and support material: for limited periods needed for the purposes above.
Affiliate commission and payout records: as long as needed for tax and accounting.
The record of AI activity: up to 90 days; the earlier versions kept so a change can be undone: 30 days.
Aggregated or de-identified data may be kept without limit.

9. If you spoke with an agent or filled in a form

The business whose agent, form or booking page you used controls your data. Its privacy policy may be hosted by us on the Service; that policy describes the business's own practices, and the business is responsible for it. To access, correct or delete your data, or to object to its use, contact that business. If you contact us instead, we will pass your request to the business or tell you how to reach it, and we will help the business respond. You can stop texts by replying STOP and stop emails with the unsubscribe link in any email.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to restrict or object to its use, to withdraw consent, and to complain to your data protection authority. Residents of some U.S. states have similar rights, including the right to appeal a refused request; we do not sell or share personal data for cross-context behavioral advertising. To use your rights over data we control, write to hello@gorocketapp.com. We will not treat you differently for doing so.

11. Cookies and similar technologies

Essential: cookies and local storage that keep you signed in, remember the selected business, protect against automated abuse, and keep a call or booking working.
Preferences: saved table columns, list sorting and unsent drafts, stored in your browser.
Widget statistics: outside the EEA, UK and Switzerland, a random first-party identifier is stored so that a visitor keeps seeing the same version of a widget and is counted once. For visitors in those regions nothing is stored on the device; a short-lived identifier that changes daily is calculated on our servers instead.
Session replay: described in section 2; not used for visitors in the EEA, UK or Switzerland.
Referral: when you open a customer's referral link, a first-party cookie on our website remembers that link for 30 days, and a random visitor identifier (kept for a year) makes sure one person is counted as one click.

We do not use advertising cookies. A business may add its own code or tracking to its widgets; that is the business's responsibility and is covered by its own notice.

12. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and separation of each business's data. No system is completely secure, and we cannot guarantee absolute security.

13. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

14. Changes

We may update this policy. The date above shows the latest version, and significant changes will be flagged in the Service.

15. Contact

OA Partners LLC, 8 The Green, Dover, DE 19901, USA. Email: hello@gorocketapp.com