Privacy Policy
Effective date: July 12, 2026
Controller: Get X Media Inc., Alberta, Canada.
hello@rouster.app
What we collect, why, and how long we keep it
| Data | Why (purpose) | Lawful basis | Retention |
|---|---|---|---|
| Account (name, email, password hash) | Sign-in, workspace membership | Contract | Life of account + 7-day deletion window |
| Connected email (Gmail messages, attachments, labels) | The unified inbox you asked us to build for you | Contract; Google API Services User Data Policy (Limited Use) | While the connection is active; removed when you disconnect (we also revoke our access at Google) or delete your account |
| Calls & texts (numbers, duration, SMS content, voicemail) | Making and receiving your business calls and messages | Contract | Life of account (your inbox is the archive) |
| Call recordings & AI-call transcripts | Reviewing calls your AI receptionist answered (callers hear "this call may be recorded" at the start of the call) | Consent / legitimate interest | 12 months, then automatically deleted (the call's metadata stays in your log) |
| Contact identity graph & signature enrichment (name, title, company, phone, website, socials, address as written in emails people send you) | One contact card per real person; never pronouns, never third-party data brokers | Legitimate interest (first-party correspondence only) | Life of account |
| AI processing data (message text sent for classification and drafting) | Spam filtering, alert triage, AI reply drafts | Legitimate interest / contract | Not stored by the AI provider (see below) |
| Device push tokens | Notifications | Contract | Deleted on sign-out or account deletion |
| Diagnostics (server logs) | Reliability & security | Legitimate interest | 30 days |
AI processing: who sees your data
Rouster's AI features (message classification, alert triage, and draft replies your AI receptionist prepares) are powered by Anthropic's Claude models via the Anthropic API. Message content needed for a given feature is sent to Anthropic for processing under Anthropic's Data Processing Agreement and Commercial Terms. Anthropic does not use Rouster's API data to train its models. Drafts are never sent on your behalf; a human approves every outgoing message.
Where your data lives & transfers
Servers in the United States (Hetzner) with encrypted offsite backups (Cloudflare R2). Service providers: Anthropic (AI, US), Google (Gmail API, US), Telnyx (voice/SMS, US), Cloudflare (networking/storage, US), Expo (push delivery, US). For users outside the US, transfers rely on contractual safeguards with these processors (DPAs; SCCs where applicable). [Confirm signed DPAs with each]
Your rights
Access, export, correction, deletion, and objection, regardless of where you live:
- Export: Settings → Export my data (one JSON bundle, self-serve).
- Delete: Settings → Delete account. Deletion is scheduled with a 7-day recovery window (sign back in to cancel), then your data is permanently removed; if you are the workspace's last member the entire workspace and its data are erased and our access to your connected accounts is revoked at the provider.
- Anything else / DSARs: email hello@rouster.app with subject "Privacy request". We respond within 30 days (20 business days for Mexico ARCO requests) with data in JSON. Appeals: reply to our response and it escalates to the controller.
Which law applies to you
- Canada: PIPEDA / Alberta PIPA.
- Mexico: LFPDPPP (derechos ARCO; see the Spanish version below).
- EU/UK visitors: GDPR / UK-GDPR as described in the table above.
- California: CCPA/CPRA. We do not sell or share personal information.
Security & breach notice
Encryption in transit (TLS) and at rest for stored provider tokens; access-controlled, firewalled infrastructure; CI-gated deployments; encrypted offsite backups. If a breach creates real risk to you, we notify you and the applicable regulator within the legally required window (72 hours where GDPR applies).
Changes to this policy will be posted here with a new effective date.
Aviso de Privacidad
Responsable: Get X Media Inc., Alberta, Canadá. hello@rouster.app
Recopilamos y tratamos: datos de cuenta (nombre, correo, contraseña cifrada), correos electrónicos de las cuentas que usted conecta, llamadas y mensajes de texto (números, duración, contenido, buzón de voz), grabaciones y transcripciones de llamadas atendidas por el recepcionista de IA, datos de contacto extraídos de las firmas de los correos que usted recibe (nombre, cargo, empresa, teléfono, sitio web, redes, dirección), tokens de notificaciones y registros de diagnóstico.
Finalidades: operar su línea telefónica de negocio, bandeja unificada y funciones de IA (filtrado de spam, clasificación de alertas y borradores de respuesta). Las funciones de IA utilizan los modelos Claude de Anthropic; Anthropic no utiliza estos datos para entrenar sus modelos, y ningún borrador se envía sin aprobación humana.
Transferencias: proveedores de servicio en Estados Unidos (Anthropic, Google, Telnyx, Cloudflare, Expo) bajo acuerdos de tratamiento de datos. No vendemos sus datos.
Derechos ARCO (Acceso, Rectificación, Cancelación, Oposición): desde la app (Ajustes → Exportar mis datos / Eliminar cuenta; la eliminación tiene una ventana de recuperación de 7 días) o escribiendo a hello@rouster.app con asunto "Solicitud ARCO". Respondemos dentro de 20 días hábiles conforme a la LFPDPPP.
Conservación: los datos se conservan mientras su cuenta esté activa y se eliminan de forma permanente tras la eliminación de la cuenta (ventana de 7 días). Las grabaciones y transcripciones de llamadas atendidas por el recepcionista de IA se eliminan automáticamente a los 12 meses. Cambios a este aviso se publicarán en esta página con nueva fecha de vigencia.