Privacy Policy

Effective October 1, 2026 · Go Rocket (https://www.go-rocket.ai) is operated by Orion Intelligence Systems LLC.

Internal arrival-source measurement

When you request a sample or checkout, our server keeps first and last arrival information in the existing service session: short campaign labels, referrer hostname, landing path without query, the landing page's industry segment, and time. If you arrived from one of our ads, the click identifier the ad platform added to the link (for example fbclid or rdt_cid) is kept with that arrival information so we can tell which ad brought you here. We also count that a public page was viewed, read for ten seconds or scrolled halfway, and that its button was pressed, with the same arrival information and nothing more. No additional attribution cookie, localStorage or fingerprint is used. The stated legal basis is GDPR Article 6(1)(f), our legitimate interest in understanding which channels lead to requested services. Full source snapshots stay in our internal lead, job and purchase records. Stripe receives bounded campaign labels with the payment. Our hosting processors operate the infrastructure on our behalf. You may object by contacting the controller below.

See the cookie policy for storage and retention details.

1. Controller

The controller for personal data processed on https://www.go-rocket.ai is Orion Intelligence Systems LLC (contact below). This policy explains what we process, why, and your rights.

2. What we process

• Account data: email address, name (if provided), login and session data.
• Content you submit: product URLs (and the public content we scrape from them to build your videos), uploaded screen recordings, photos and voice recordings you provide as custom presenters, and text you type.
• AI assistants (MCP): when you or your AI assistant (for example ChatGPT or Claude) use our MCP server at https://www.go-rocket.ai/mcp/, we receive the website URL you ask about and the IP address and user agent of the request. We use them to read that public page, show you a sample, return a checkout link, limit abuse and count requests. We receive nothing else from the assistant: not your chat, not your account with it.
• Billing data: subscription and credit-purchase records. Card details are processed exclusively by Stripe; we never see or store your card number.
• Usage data: standard server logs and error reports (Sentry, without email addresses).
• Script by email: when you leave your email address under a sample, we use it to send the 15-second script for the page you entered and one reminder (GDPR Article 6(1)(a), your consent). Every such mail carries an unsubscribe link; after you unsubscribe we keep only your address on a suppression list so we never mail it again.
• Public contact details of submitted websites: for a website URL entered on our site, we read the contact address that website publishes (its contact page or legal notice) and store it with the submission (GDPR Article 6(1)(f), our legitimate interest in following up on a request for a video about that website).

3. Why we process it (legal bases)

• To provide the service and generate your videos (performance of contract).
• To bill you and prevent fraud (contract, legitimate interest, legal obligations).
• To improve the product and secure the platform (legitimate interest).
• Marketing communications only with your consent, revocable anytime.

4. Processors and transfers

We use the following providers to operate the service. Generation providers receive the content needed for the selected task.

• Stripe: checkout, payments, subscriptions and fraud prevention.
• Microsoft Azure, including Azure OpenAI and AI Foundry: hosting, database, storage, operational logs, text and image generation, speech synthesis and transcription.
• Anthropic: text generation and quality checks of scripts and images.
• Kie.ai: routes generation requests and their reference content to video and image models.
• ElevenLabs: speech synthesis and, when you provide a voice recording with permission, a temporary voice model.
• Firecrawl: reads the public product pages you submit.
• Twilio SendGrid: account and service emails, including sign-in links and video notifications.
• Sentry: error reports with technical context and a pseudonymous account ID for signed-in users, without email addresses.
• Cloudflare: handles the redirect from go-rocket.ai to www.go-rocket.ai, processing connection data such as your IP address. The www site is served directly by Microsoft Azure. Cloudflare Email Routing forwards messages sent to our go-rocket.ai email addresses to our inbox at Proton Mail, which stores incoming correspondence, including sender details, message content and attachments.

Some providers process data in the United States; where GDPR applies, transfers rely on standard contractual clauses or adequacy decisions.

5. Retention

Generated videos and source uploads are retained for a limited download window and then deleted from active storage. Account and billing records are kept as long as your account exists and thereafter as required by law. You can delete your account at any time from the account settings; personal data is anonymized upon deletion.

6. Your rights

Where GDPR or similar laws apply, you have the right to access, rectify, delete, and port your personal data, to restrict or object to processing, and to withdraw consent. You may also lodge a complaint with your local supervisory authority. To exercise any right, email legal@go-rocket.ai.

7. Cookies

We use only cookies necessary for login, sessions, language and form security. Session cookies are set on the go-rocket.ai domain.

Ad measurement, server-side

If you arrived from one of our ads on Meta or Reddit, our server sends that platform a conversion event (page view, sample shown, checkout started, purchase) with the click identifier from the ad link, your IP address, your browser identifier and, for a purchase, your email address in hashed form, so the platform can attribute the result to the ad. We load none of their scripts and set none of their cookies; organic visitors are never reported. The legal basis is GDPR Article 6(1)(f), our interest in knowing which ad led to a request. You can object at any time through the tracking opt-out link in the footer; a Global Privacy Control signal from your browser has the same effect.

8. Changes

We will update this policy when our processing changes and adjust the effective date above.