ROKETT.AI

Privacy Policy

Last updated 2026-08-17 · ROKETT LTD

This policy explains what ROKETT.AI (“ROKETT”, “we”, “us”) collects when you use the application at https://app.rokett.ai, why we collect it, where it lives, and how you can have it deleted. ROKETT is operated by ROKETT LTD, 5-9 Main Street, GX11 1AA, Gibraltar (company no. 126030). Contact: privacy@rokett.ai.

1. What we collect

Account and workspace data

  • Your name, email address and profile picture, from the credentials you sign in with (email and password, or Google).
  • The content you and your team create in a workspace: scripts, storyboards, prompts, uploaded reference images and audio, brand books, product details, and the conversations you have with the ROKETT agent.
  • The videos, images and reports the product generates for you.

Data from platforms you connect

When a workspace administrator connects an advertising or commerce platform, we access only what the permissions you approve on that platform allow, and only for the accounts you select in ROKETT.

  • Meta (Facebook and Instagram) — through Meta’s official APIs and Facebook Login for Business. With the permissions you grant (ads_read, business_management, pages_show_list, pages_read_engagement, pages_read_user_content, instagram_basic) we read the list of your ad accounts, Pages and Instagram accounts; your campaigns, ad sets and ads with their creatives (images, videos and copy); performance metrics such as spend, impressions, clicks, purchases and ROAS; and public comments on the posts behind your ads. We do not post, edit or create anything on your behalf, and we do not read private messages.
  • Google Ads — campaign structure and performance metrics for the accounts you select.
  • Shopify — orders, products and customer aggregates needed to relate ad performance to sales.

The access tokens these platforms issue are stored encrypted and are used only to perform the syncs described here.

Usage and technical data

  • Standard server logs (IP address, browser type, pages requested, timestamps) and product analytics needed to run and improve the service.
  • Cookies strictly necessary for signing in and keeping your session.

2. How we use it

  • To provide the product: generating creatives, keeping your workspace, showing your connected accounts’ performance.
  • To analyse your ads with AI — for example tagging creatives, transcribing video, and summarising comments — so the product can report on and learn from what works for you.
  • To operate, secure and support the service, and to communicate about your account.

We do not sell personal data, and we do not use data from a connected platform for anything other than the features you connected it for. Data from one customer’s connected accounts is never shown to another customer.

3. Where it is processed

ROKETT runs on infrastructure and services provided by third parties acting as processors on our behalf, under contracts that restrict them to our instructions:

  • Supabase (database, authentication and file storage; United States, us-east-1).
  • Fly.io (application hosting; United States).
  • AI model providers used to generate and analyse content — Anthropic, Google (Gemini), OpenAI, ElevenLabs, and video-generation models (Veo, Seedance, Sora) accessed via KIE.AI. Content is sent to these providers only to fulfil the generation or analysis you request.
  • Resend (transactional email).
  • Meta, Google and Shopify, as the platforms you choose to connect.

Where personal data leaves the European Economic Area we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.

4. Retention and deletion

  • Workspace content is kept for as long as the workspace exists.
  • Data synced from a connected platform is kept while the connection is active. Disconnecting the platform in Integrations removes the stored tokens and the synced data for that workspace.
  • Deleting your account or workspace removes its data from our systems within 30 days, except where we must keep records to meet legal obligations.

Step-by-step instructions, including how to revoke ROKETT from your Facebook settings, are on the data deletion page.

5. Your rights

If you are in Gibraltar, the EEA, the UK or Switzerland, you may access, correct, export or erase your personal data, restrict or object to its processing, and complain to your supervisory authority. Wherever you are, write to privacy@rokett.ai and we will respond within 30 days.

6. Security

Data is encrypted in transit and at rest; platform tokens are encrypted at the application layer; access within our team is limited to what operating the service requires. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

7. Changes

We will post changes to this policy here and update the date at the top. Material changes will also be announced inside the product.