RCKNSign in

Privacy Policy

Effective May 22, 2026

RCKN (“we”, “our”, “us”) is a product of LVNG AI, Inc. This policy explains what data we collect when you use RCKN, how we use it, and your rights with respect to that data.

1. What we collect

When you connect your email account, RCKN ingests:

  • Email metadata — subject lines, sender/recipient addresses, timestamps, and thread IDs.
  • Email bodies — full message text and HTML, stored per-workspace in your dedicated Neo4j database.
  • Attachment filenames and MIME types — attachment content is fetched on-demand and never stored server-side beyond a short-lived signed URL cache (≤ 1 hour).
  • OAuth tokens — encrypted access and refresh tokens used to read and, if enabled, send email on your behalf.
  • Account information — the email address and user ID you sign in with via Supabase Auth.

We do not collect billing information directly — payments are processed by Stripe and covered by their privacy policy.

2. How we use your data

We use collected data to:

  • Extract and link clients, deadlines, and documents visible in the RCKN UI.
  • Generate draft replies using Anthropic Claude. Email content is sent to Anthropic's API as part of the prompt context; Anthropic's zero-retention API option is used so content is not stored by them.
  • Compute semantic embeddings (pgvector) for inbox search. Embeddings are stored per-workspace and never shared across tenants.
  • Produce audit log entries for your firm's own compliance use.

We do not use your email content to train any AI model, including our own or third-party providers' foundation models.

3. Data sharing

We share data only with sub-processors required to operate the service: Anthropic (Claude API, zero-retention mode), Supabase (database), DigitalOcean (infrastructure), and Stripe (payments). We do not sell personal data or share it with advertisers. A current list of sub-processors is available on request at privacy@lvng.ai.

4. Retention and deletion

Email data is retained for the lifetime of your workspace. When a workspace is deleted via the admin panel or the right-to-forget API, all associated rows in Postgres, all Neo4j nodes, OAuth tokens, and vector embeddings are permanently deleted within 30 seconds. Audit log entries referencing the deleted workspace are anonymised (workspace and user IDs replaced with null) rather than hard-deleted, for legal compliance.

5. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion (right to erasure / right to forget).
  • Port your data in a machine-readable format.
  • Object to processing.

To exercise any of these rights, email privacy@lvng.ai. We will respond within 30 days.

6. Cookies and tracking

RCKN uses session cookies (via Supabase Auth) strictly for authentication. We do not place advertising, analytics, or tracking cookies. There is no third-party analytics script loaded by the application.

7. Contact

Questions about this policy: privacy@lvng.ai
LVNG AI, Inc. · San Francisco, CA