Privacy Policy

When you connect your email account, RCKN ingests:

• Email metadata — subject lines, sender/recipient addresses, timestamps, and thread IDs.
• Email bodies — full message text and HTML, stored in workspace-scoped application records and used to build workspace-tagged graph relationships.
• Attachments — incoming attachment metadata is indexed and content is fetched when needed. Files you add to a draft are stored in private object storage and retained with that draft until the applicable cleanup or deletion workflow runs.
• OAuth tokens — encrypted access and refresh tokens used to sync mail and perform the mail, calendar, and meeting actions you choose.
• Account information — the email address and user ID you sign in with via Supabase Auth.

We do not collect billing information directly — payments are processed by Stripe and covered by their privacy policy.

We use collected data to:

• Extract and link clients, deadlines, and documents visible in the RCKN UI.
• Generate draft replies through the configured commercial model API. The provider receives email content included in the task's prompt context.
• Compute semantic embeddings (pgvector) for inbox search. Embeddings are stored per-workspace and never shared across tenants.
• Produce audit log entries for your firm's own compliance use.

We do not use your email content to train RCKN models. Third-party model processing is governed by the commercial API terms and data controls in effect for the deployed service; those terms are available on request.

Depending on the deployment and enabled features, RCKN uses service providers for model inference, database and object storage, infrastructure, authentication, and payments. We disclose data only as needed to provide those services. We do not sell personal data or share it with advertisers. A current, deployment-specific subprocessor list is available on request at privacy@lvng.ai.

Email data is retained for the lifetime of your workspace. A workspace deletion runs a multi-store purge covering uploaded draft files, workspace-tagged Neo4j nodes, Postgres records, OAuth connections, and embeddings. The operation reports the outcome for each store; a partial failure is surfaced for retry and investigation. Completion time depends on the connected services and is not guaranteed to a fixed number of seconds.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion (right to erasure / right to forget).
• Port your data in a machine-readable format.
• Object to processing.

To exercise any of these rights, email privacy@lvng.ai. We will respond within 30 days.

RCKN uses session cookies (via Supabase Auth) strictly for authentication. We do not place advertising, analytics, or tracking cookies. There is no third-party analytics script loaded by the application.

Questions about this policy: privacy@lvng.ai
LVNG AI, Inc. · San Francisco, CA