Privacy Policy

Last updated: July 2026

Who we are

Rova is operated by Rova Ltd, registered in England and Wales. Our service helps small businesses automate their customer communications and booking management. You can contact us at hello@getrova.xyz.

What data we collect

When you sign up: your name, email address, and business details.

When you connect integrations: access tokens for Google Calendar, Gmail, Outlook, Stripe, and WhatsApp. These are stored encrypted and used only to operate your agents.

When your agents run: customer names, email addresses, phone numbers, and booking details that your agents process on your behalf.

Usage data: which agents you use, when actions are taken, and basic analytics to help us improve the product.

How we use your data

  • To operate your AI agents and carry out the actions you've approved.
  • To send you product updates and support communications (you can opt out anytime).
  • To improve Rova. We analyse usage patterns in aggregate, never individual customer data.
  • We never sell your data or your customers' data to any third party.

Your customers' data

When Rova processes messages or bookings on your behalf, your customers' data is handled under your instruction. You are the data controller; Rova is the data processor. You are responsible for having appropriate grounds to process your customers' data and for informing them that AI-assisted tools may be used in your business communications.

Data retention

Your data is retained for as long as your account is active. You can export all your data at any time from Settings → Account. When you cancel your account, your data is deleted within 30 days.

Your rights under UK GDPR

You have the right to access, correct, or delete your personal data at any time. To exercise any of these rights, email hello@getrova.xyz. We will respond within 30 days.

Cookies

We use only essential cookies required to keep you logged in and the product functioning. We do not use advertising or tracking cookies.

Third-party services

Rova uses the following third-party services to operate:

  • Supabase (database and authentication)
  • Stripe (payment processing)
  • Google APIs (Calendar and Gmail integration)
  • Microsoft APIs (Outlook Calendar integration)
  • Meta APIs (WhatsApp, Instagram, Facebook integration)
  • OpenAI and Google (AI model processing)

Each provider has their own privacy policy and data processing terms.

Changes to this policy

We may update this policy from time to time. We'll notify you by email of any significant changes. The date at the top of this page shows when it was last updated.

Contact

For any privacy-related questions: hello@getrova.xyz.