Privacy Policy

RobotRock provides a human-in-the-loop approval platform for AI agents, automations, and software workflows. This Privacy Policy applies to our marketing website, dashboard, APIs, SDK, and related services (collectively, the “Services”).

If you have questions about this policy, contact us at privacy@robotrock.io.

We collect information in the following ways:

• Account information such as your name, email address, workspace, and authentication details when you sign up or are invited to a workspace.
• Workflow and task data including approval requests, task context, decisions, comments, timestamps, and audit history submitted through the Services or our API and SDK.
• Marketing attribution when you accept analytics cookies, such as Google click identifiers (gclid, gbraid, or wbraid), UTM campaign parameters, landing page URL, and referrer. We use this to understand which campaigns lead to sign-ups and, with your consent, report conversions to Google Ads.
• Technical and usage data such as IP address, browser type, device information, pages viewed, API request metadata, and diagnostic logs used to operate and improve the Services.
• Communications when you contact support, request sales information, or receive product and transactional emails.
• Payment information processed by our payment provider when you subscribe to a paid plan. RobotRock does not store full payment card numbers.

We use the information we collect to:

• Provide, maintain, and secure the Services
• Route approval tasks and deliver notifications
• Authenticate users and manage team access
• Process subscriptions and billing
• Monitor performance, troubleshoot issues, and prevent abuse
• Communicate with you about product updates and support
• Measure marketing campaign effectiveness and report sign-up conversions to Google Ads (with consent)
• Comply with legal obligations and enforce our terms

We do not sell your personal information. We may share information with:

• Service providers that help us host infrastructure, send email, process payments, provide authentication, and operate the Services under contractual confidentiality and security obligations. See our subprocessor list for details.
• Advertising measurement partners such as Google (Ads / Data Manager) when you accept analytics cookies, to report offline sign-up conversions linked to ad clicks. See Google's Privacy Policy.
• Your workspace when you use RobotRock as part of a team workspace, including administrators who can view workspace activity and audit records.
• Integrations you enable such as webhooks, automation platforms, or AI tools that you connect to RobotRock.
• Legal and safety purposes when required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale.

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Workspace administrators may be able to export or delete certain data depending on plan and configuration. When data is deleted, we remove it from active systems within a reasonable period, subject to backup and legal retention requirements.

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You can update account details in the dashboard where available, or contact us at privacy@robotrock.io.

You may opt out of non-essential marketing emails using the unsubscribe link in those messages. Transactional and service-related communications may still be sent.

We use cookies and similar technologies to keep you signed in, remember preferences, measure site usage, and improve performance. A cookie banner lets you accept or reject non-essential analytics and marketing cookies. You can change your browser settings at any time, though some features may not function properly if cookies are disabled.

Cookies we use include:

• rr_cookie_consent — stores your cookie preference (1 year)
• rr_attribution — first-touch campaign attribution including UTM parameters and Google click IDs when you accept analytics cookies (90 days)
• Plausible — privacy-friendly analytics on our marketing site and dashboard when you accept analytics cookies
• Authentication — session cookies required to sign in and use the dashboard

When you accept analytics cookies and arrive from a Google Ads campaign, we may report your sign-up as an offline conversion to Google so we can measure ad performance. We do not load third-party advertising pixels for retargeting on our sites.

RobotRock may process information in countries other than where you live. When we transfer personal information internationally, we use appropriate safeguards as required by applicable law.

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page and update the “Last updated” date. Your continued use of the Services after changes become effective constitutes acceptance of the revised policy.