Privacy Policy

The short version.

We collect only what we need to redesign, host, and support your website.
We use trusted vendors (hosting, payments, AI) to deliver the service — never to sell your data.
Your website content is yours. You can export it, change it, or ask us to delete it.
Questions? Email [email protected].

1. Who we are

Rooga is a service operated by Rivington Technologies, Inc., a Delaware corporation ("Rooga," "we," "us," or "our"). We redesign, host, and maintain websites for small businesses. This policy applies to rooga.ai, the customer dashboard and site editor, and the websites we host on your behalf. If you have questions about it, contact us at [email protected].

2. Information we collect

Information you give us

Account details — your email address, and (if you choose password sign-in) a password. You can also sign in with Google.
Your website and business information — the address of your existing site, business name, logo, images, copy, contact details, and anything else you provide so we can build and maintain your site.
Editor instructions — the messages and change requests you send through the chat-based editor to update your site.
Support and communications — emails and messages you send us.

Information we collect automatically

Usage and device data — basic information such as your browser type, pages viewed, and actions taken, used to keep the service secure and working.
Cookies and similar technologies — we use essential cookies to keep you signed in and to operate the dashboard and editor. See Cookies below.

Information from public sources

As part of preparing a redesign, we may access publicly available pages and assets from a business's existing website (for example, to capture the current design, images, and copy). If we reach out to a business we haven't worked with yet, we may use publicly listed contact information. You can ask us to stop and to delete this information at any time.

3. How we use information

To create, host, update, and maintain your website.
To operate the redesign process, including quality checks and search-engine optimization.
To authenticate you, secure your account, and manage access and permissions.
To process your subscription and payments.
To provide support and respond to your requests.
To send service messages (for example, sign-in links, billing notices, and important updates).
To detect, prevent, and address fraud, abuse, and security issues.
To comply with legal obligations.

We do not sell your personal information, and we do not use your business or website content to train third-party AI models for their own purposes.

4. How the redesign is built

We use AI tools to help produce your redesign quickly and to a high standard. Content you provide — such as your existing site, business details, and editor instructions — may be processed by our AI providers solely to generate and update your site for you. These providers act on our instructions and are contractually restricted from using your content for their own model training.

5. When we share information

We share information only in these limited cases:

Service providers — vendors who help us run the service, including hosting and infrastructure, authentication, payment processing, AI processing, email delivery, and storage. They may access information only to perform work for us.
Payment processing — subscriptions are handled by our payment processor, which collects and stores your card details directly; we do not store full card numbers.
People you invite — if you grant someone access to your site, they can see and manage what you've shared with them.
Legal reasons — when required by law, to enforce our terms, or to protect the rights, safety, and property of our users, the public, or us.
Business transfers — if we're involved in a merger, acquisition, or sale of assets, information may transfer as part of that deal, subject to this policy.

Key vendors

We rely on a small set of established providers to deliver the service, including:

Google Firebase — account sign-in and authentication.
Stripe — subscription billing and payments.
Anthropic — AI processing used to generate and edit your site.
Cloudflare and Railway — hosting, delivery, and storage of your site and assets.

Each provider maintains its own privacy practices, which govern their handling of data.

6. The websites we host for you

Sites we host are public by design and will be visited by your customers, search engines, and AI assistants. Any personal information you choose to publish on your site (such as a contact form or business phone number) is public. You're responsible for the content you publish, and for having any privacy notices your own site may require for its visitors.

7. Cookies

We use a small number of cookies that are essential to the service — primarily to keep you securely signed in and to operate the dashboard and editor. We don't use advertising cookies. You can block cookies in your browser, but parts of the service may not work if you do.

8. Data retention

We keep your information for as long as your account is active and as needed to provide the service. Published site versions are retained so your live site keeps working. When you close your account or ask us to delete your data, we remove it within a reasonable period, except where we're required to keep certain records (for example, for billing, tax, or legal reasons).

9. Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections, access controls, and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly if an issue arises.

10. Your choices and rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct or update inaccurate information.
Delete your information.
Export a copy of your website content.
Object to or restrict certain processing.
Opt out of non-essential communications at any time.

To exercise any of these, email [email protected]. We'll respond within a reasonable timeframe and may need to verify your identity first.

11. International data transfers

We and our providers may process and store information in the United States and other countries. Where required, we rely on appropriate safeguards to protect information that moves across borders.

12. Children

Rooga is a service for businesses and is not directed to children under 16. We don't knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the date at the top and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.

14. Contact us

Questions, requests, or concerns about your privacy? Reach us at [email protected].