Privacy Policy

This Privacy Policy explains how ROKR collects, uses, discloses, and protects personal information when you visit our websites, create an account, use the ROKR platform, contact us, or otherwise interact with our services.

ROKR is an OKR management and goal alignment service for businesses. We collect and use information only as needed to provide, secure, support, maintain, and improve the service, comply with law, and enforce our agreements.

Account and contact information: name, work email address, organization name, role, login identifiers, billing contact details, and communications you send to us.

Customer content: objectives, key results, check-ins, comments, attachments, workspace settings, and other content submitted to the service by you or your organization.

Service usage and device information: pages and features used, browser type, approximate location derived from IP address, device identifiers, log data, timestamps, diagnostic data including error and performance monitoring, and security events.

Payment information: billing plan, subscription status, invoice details, and payment processor references. Payment card details are handled by our payment processor and are not stored by ROKR.

Cookies and similar technologies: essential cookies and local storage for site operation, authentication, and consent preferences, plus optional analytics cookies when accepted. Third-party SDKs used by ROKR (including error monitoring and authentication providers) may also set cookies and use local storage for session continuity and error tracking. See our Cookie Policy for more detail.

We use information to create and administer accounts, operate workspaces, deliver product features, process subscriptions, provide support, communicate service updates, maintain security, detect abuse, troubleshoot issues, improve reliability and usability, comply with legal obligations, and enforce our Terms and Conditions.

We do not sell personal information. We do not use customer content for unrelated advertising. We do not collect more information than we reasonably need for the service purposes described in this policy.

Your organization controls the customer content submitted to ROKR. We process that content on behalf of the customer to provide the service and as otherwise instructed through product settings, support requests, or applicable agreements.

Administrators may access, export, configure, or delete workspace content and user access according to the permissions available in the service. If you use ROKR through an organization, direct workspace-specific privacy questions to that organization first.

We share information with the following categories of service providers that help us host, secure, analyze, monitor, support, bill, and operate ROKR: cloud infrastructure and hosting providers, error monitoring and observability providers (including Sentry, used for application error monitoring and performance tracking), authentication providers, payment processors, and communication tools. These providers may access information only to perform services for us and must protect it appropriately. A current list of key sub-processors is available on request.

We share information with service providers that help us host, secure, analyze, support, bill, and operate ROKR. These providers may access information only to perform services for us and must protect it appropriately.

We may share information with professional advisors, in connection with a business transaction, to comply with law or legal process, to protect rights and safety, or with your consent.

We do not disclose customer content to third parties for their own marketing purposes.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include access controls, encryption where appropriate, logging, monitoring, and vendor review.

No online service can be guaranteed completely secure. If you believe your account or information has been compromised, contact us promptly at [email protected].

We retain information for as long as needed to provide the service, maintain business and security records, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate operational needs.

Customer content is retained according to the customer account settings, subscription status, and applicable agreements. Deletion requests may be subject to backup, audit, legal, fraud-prevention, and security retention requirements.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to appeal a privacy request decision or lodge a complaint with a regulator.

To make a request, contact [email protected]. We may need to verify your identity and, when ROKR processes information on behalf of your organization, we may direct the request to that organization or ask for its authorization.

ROKR may process and store information in the United States and other countries where we or our service providers operate. When information is transferred internationally, we use safeguards designed to protect it as required by applicable law.

ROKR is a business service and is not directed to children under 13 or the minimum age required by local law. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the service, by email, or by another reasonable method. The updated policy is effective when posted unless a later date is stated.

Questions about this Privacy Policy, privacy requests, or security concerns can be sent to [email protected].