Privacy Policy

Last updated: July 16, 2026

1. Who we are

Rockybot ("we") is a technology company based in Colombia that offers Rockybot Workspace, a customer-attention platform with AI agents, a CRM, and team management. For the purposes of this policy, Rockybot is the data controller for personal data collected through this site and the platform.

2. Data we collect

• Account data: name, email, organization name, phone, and credentials when you create an account.
• Contact form: full name, email, company, service of interest, preferred contact method, and your message.
• Chat conversations: messages you exchange with our AI agents through this site's widget or channels such as WhatsApp, Instagram, or Facebook Messenger, along with the identifiers those platforms provide.
• Billing data: records of credit purchases and subscriptions. Payments are processed by our payment providers (Wompi and Stripe); we do not store full card details.
• Technical data: basic server logs (IP address, browser type, pages visited) and usage metrics required to operate and secure the service.

3. Data processed on behalf of our customers

When a business customer uses Rockybot Workspace to serve its own customers, the conversations and contact data of those end users are processed on behalf of and under the instructions of the business customer, who acts as the data controller. Rockybot acts as a data processor for that data. If you are an end user who interacted with a business through our platform, direct your privacy requests to that business.

4. How we use your data

• Provide, operate, and maintain the platform and the services you request.
• Operate our AI agents, which answer on behalf of the business and record leads and orders in the CRM.
• Process payments, credits, and subscriptions.
• Improve the service and the quality of agent responses.
• Meet legal obligations and protect the security of the platform.

Conversations with our agents are processed by AI language models to generate responses.

5. Legal basis

We process personal data in accordance with Colombia's Law 1581 of 2012 (habeas data), Decree 1377 of 2013, and related regulations. By creating an account, submitting the contact form, or writing to our channels, you authorize Rockybot to process your data for the purposes described in this policy.

6. Who we share with (subprocessors)

We do not sell your personal data. We only share it with the providers required to run the service:

• Amazon Web Services (AWS): cloud hosting and infrastructure.
• AI model providers: processing conversations to generate responses.
• Meta: messaging via WhatsApp, Instagram, and Facebook Messenger.
• Wompi and Stripe: payment processing.
• Authorities, when required by law.

7. Retention

We keep personal data only as long as necessary for the purposes described, while your account or our business relationship is active, or as required by law. Usage and billing records are retained per our accounting and legal obligations. You may request deletion at any time.

8. Your rights

Under Law 1581 of 2012 you have the right to know, access, update, rectify, and delete your personal data, to revoke consent, and to file complaints with the Superintendency of Industry and Commerce (SIC).

To exercise these rights, contact us through the contact form or via WhatsApp at +57 305 428 7590. We will respond within the timeframes established by law.

9. Cookies and local storage

We use browser local storage for functional purposes (remembering your language preference and keeping your session) and analytics tools to understand site usage.

10. Changes

We may update this policy from time to time. The current version will always be published on this page with its last-updated date.