Privacy Policy

Rowenna operates on behalf of the dealership you are doing business with. The dealership determines how consumer information is used for its own sales and service purposes; we process that information as its service provider in order to run the Service.

We act in two distinct roles, described below: as the controller of our own business account data, and as a processor of consumer data on behalf of each business customer.

For business account data — dealership signups, staff user accounts (name, work email, role), account and billing contact details, and support correspondence — we are the controller. We collect it to create and secure accounts, provide support, invoice for the Service, and meet legal and accounting obligations. We retain it while the account is active and for as long as needed afterward for tax, accounting, and dispute-resolution purposes.

For a business’s consumer data we act as its processor and handle the data on its documented instructions. This includes chat transcripts; call transcripts and, only where that business enables recording and a spoken disclosure is given, call recordings; contact details; stated preferences captured in conversation; and customer and purchase history the business imports from its own systems.

If you are a consumer, direct data requests to the dealership you interacted with — it decides how your information is used. We assist that business in locating and fulfilling your request.

Contact details you provide (name, mobile number, email), the content of your chat, text, and phone conversations with Rowenna, vehicle and appointment preferences you share, and basic technical data such as timestamps and device or browser information.

To answer your questions, surface vehicles, book and confirm appointments, follow up on requests you made, maintain the dealership’s customer records, and comply with legal obligations including consent recordkeeping.

Rowenna’s replies are generated by large-language models, and its spoken voice is produced by speech-synthesis providers. To generate a response, the relevant parts of a conversation — and, on phone calls, a transcript of what was said — are sent to those providers as our subprocessors. Recorded calls are transcribed for the dealership’s records. We do not use conversation content to train our own models.

We share information with the dealership that collected it and with vendors who operate the Service on our behalf — telephony and messaging (Twilio), cloud hosting and database infrastructure, email delivery, and AI model providers. We do not sell personal information.

• Twilio — voice calls and SMS delivery
• ElevenLabs — speech synthesis for the voice agent
• Google — large-language models, accessed through our AI gateway
• Supabase — database and application hosting
• Resend — transactional and notification email
• Cloudflare — network and application infrastructure

Each subprocessor is bound to process personal information only to provide its service to us. As stated above, text messaging originator opt-in data and consent are never shared for marketing or promotional purposes.

Conversation history, lead records, and appointment records are retained for the dealership’s business use. Consent and opt-out records are retained for as long as required to demonstrate compliance with messaging regulations, even after a record is otherwise inactive.

Consumer data is kept while the business’s account is active. After the account ends we delete or de-identify it following a reasonable export window, except records we are required to retain.

You can opt out of text messages at any time by replying STOP, ask the dealership to delete or correct your record, or ask to be placed on its Do-Not-Contact list, which suppresses outreach across every channel.

Depending on where you live, you may have the right to access, correct, or delete the personal information a dealership holds about you, or to opt out of certain uses. Because the dealership controls that information, send your request to the dealership you interacted with and it will act on it with our assistance. If you contact us directly we will honor the request where we can, or forward it to the dealership and tell you that we did. We do not discriminate against anyone for exercising these rights.

Access to dealership data is restricted to authorized staff of that dealership and enforced at the database level. We use encryption in transit and at rest through our infrastructure providers.

Staff access inside a dealership account is role-based, and sensitive actions are logged. No system is perfectly secure, but we work to protect information appropriately for its sensitivity.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we will delete it.

We may update this policy; the “last updated” date above reflects the current version. Material changes will be communicated to business account owners, and the updated policy applies from its effective date.

Dealer Merchant Center LLC — support@meetrowenna.com. See also our SMS terms.