Privacy Policy
Rocketly — How we collect, use, and protect your personal data.
1. Introduction
Rocketly ("we") is a B2B CRM SaaS platform. This policy explains how your data is processed through our website (gorocketly.com) and mobile app (Rocketly). This policy and the related data-protection documents describe our approach to processing personal data, your rights and how to make a request.
2. Data We Collect
Name, email, phone, company, address, notes, tasks/appointments, files, quotes, opportunities.
Email, hashed password, organization, role, permissions.
Device type, OS, app version, IP, crash reports (Sentry), push tokens.
Message content from integrated channels (WhatsApp Business, Instagram DM, Email IMAP, Telegram, SMS) — per your explicit configuration.
3. How We Use Data
4. AI Data Processing
AI features may use third-party AI providers according to your selected configuration. Before enabling them, assess which data will be processed and review the terms that apply to the provider, region and use case. Available options are shown in your account settings.
5. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Sentry | Crash reports | Device info, error details |
| AI service providers | Run enabled AI features | Content and context required for the selected feature |
| Expo / FCM | Push notifications | Device token |
| Polar.sh | Subscription billing | Email, payment (web only) |
| DigitalOcean | File storage | Uploaded files |
| Google OAuth | Google sign-in, Gmail sending, Calendar, Ads, Analytics, Search Console, Drive | Only data you authorize — see section 6 |
We do NOT sell your data.
6. Google User Data
If you choose to connect a Google account, Rocketly requests only the permissions needed for the feature you enable. You can see and revoke them at any time in your Google Account (myaccount.google.com/permissions) or by disconnecting the integration in Rocketly.
| Google permission | What we access | How we use it |
|---|---|---|
| Sign in with Google (email, basic profile) | Your email address, name and profile picture | To create and sign in to your Rocketly account. |
Gmail – send only (gmail.send) | Permission to send email as you. We cannot read your inbox. | To send the emails you write or approve inside Rocketly (for example to a lead or customer) from your own address. |
Google Calendar events (calendar.events) | Events on your calendars | To create, update and show meetings and appointments you schedule in Rocketly. |
Google Ads (adwords) | Your Google Ads accounts, campaigns and performance reports | To show your ad performance in Rocketly and, only when you take the action, change campaign status, budgets or create campaigns. |
Google Data Manager (datamanager) | Permission to send conversion events to your Google Ads account | When you enable conversion upload, we send the outcome of a lead (for example a closed deal) with the Google click ID or a SHA-256 hashed email/phone, so Google Ads can measure your campaigns. Raw email or phone numbers are never sent. |
| Google Analytics (read only) | Reports of the properties you select | To show website traffic and conversion reports in Rocketly. |
| Google Search Console (read only) | Search performance and URL inspection data of the sites you select | To show search queries, pages and indexing status in Rocketly. |
| Google Drive (read only) | The folders you choose to link | To list and open files from linked folders inside Rocketly. We do not change or delete your Drive files. |
Rocketly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. Data Security
8. Data Retention and Deletion
9. KVKK Compliance (Turkey)
Under Law No. 6698 (KVKK), your rights include: information, correction, deletion, objection. Data Controller: Rocketly. Contact: [email protected]
10. Rights under GDPR (EU)
Where GDPR applies, you may have rights including access, rectification, erasure, restriction of processing, portability and objection. When international data transfers are necessary, they are assessed under applicable data-protection requirements and appropriate safeguards. Contact us at [email protected] to make a request.
11. Children's Privacy
Rocketly is not intended for individuals under 18. We do not knowingly collect data from children under 18. If we learn we have collected data from a minor, we will delete it promptly.
12. Changes
Material changes are communicated via email and in-app notification. We provide at least 30 days notice before changes take effect.
13. Contact
Rocketly — Privacy Officer
[email protected]
Data Protection Officer (DPO): [email protected]
Last updated: September 2026 · Version 3.1