Privacy Policy

Last updated: October 26, 2026

Rook AI ("Rook", "we", "us") makes the Rook Platform, a revenue platform for car washes. It sells memberships online, lets members manage their plans, recovers declined cards, sends texts and email on a wash's behalf, builds the wash's ad audiences, runs its ad campaigns, and measures each of these against a holdout group. This policy explains what information the Rook Platform collects, how we use it, and the choices you have. Rook's sales-coaching product is covered by its own policy at getrook.ai/privacy.

Who this covers

• Car wash businesses that use Rook ("washes"), and the owners and staff who sign in.
• A wash's customers and members. Rook processes their information on the wash's behalf and under the wash's instructions. The wash is responsible for its own customer relationships; questions about a wash's use of your information can go to the wash or to us.

Information we collect

• Account information for wash owners and staff: name, email, mobile number, role and business.
• Wash customer information from the wash's point of sale and from Rook's checkout and member pages: name, phone number, email, license plate and vehicle, membership plan and status, visits and purchases, and text and email consent. Card payments are entered into the payment processor's own secure field; Rook stores only the processor's token and never stores card numbers.
• Connected account data from services a wash chooses to connect, such as Google, Meta, its help desk and its messaging provider (see below).
• Website and checkout activity on pages Rook runs for a wash, such as which plan was viewed and where a checkout stopped. We never record what is typed into form fields.
• Usage and log data: device and browser information and how the Rook apps are used.

How we use information

• To provide the platform to the wash: checkout, member self-service, declined-card recovery, texts and email, reports, ad audiences and campaigns, and holdout measurement.
• To prepare changes for the wash to approve, apply the changes it approves, and confirm they took effect. Changes to a wash's point of sale, new ad spend and messages to customers are made only with the wash's approval.
• To operate, secure, support and improve the platform.

Google user data

A wash can connect its Google accounts to Rook by signing in with Google and granting access. Depending on what the wash connects and approves, Rook may access:

• Google Ads: account structure, campaigns, ad groups, ads, keywords, budgets, audiences, conversion settings and performance reports.
• Google Analytics, Tag Manager, Search Console and Business Profile: reports and settings for the wash's own properties.
• BigQuery: the wash's reporting data set.

We use this data only to provide and improve features the wash uses in Rook: showing the wash its results, building and measuring its campaigns and audiences, preparing changes for the wash to approve and making the changes it approves, and sending the wash's own conversions and customer lists, which Rook hashes before they are sent. Access tokens are stored encrypted and used only for the account that granted them.

• We do not sell Google user data.
• We do not use or transfer Google user data for serving ads to anyone other than the wash it belongs to, or to determine credit-worthiness or for lending.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
• We transfer Google user data to others only as needed to provide the wash's features (for example, our hosting and AI processing providers, which act on our instructions), to comply with law, or as part of a merger or acquisition with notice to the wash.
• Our people read Google user data only with the wash's permission, for security, or to comply with law.

Rook's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A wash can disconnect Google at any time in Rook or at myaccount.google.com/permissions. When it does, we stop using that access and delete its tokens.

Meta and other connected services

When a wash connects Meta (Facebook and Instagram) or another service, Rook uses the access the wash grants in the same way: to show results, prepare and make approved changes, and send the wash's own conversions and hashed customer lists. We do not sell this data or use it for anyone but the wash it belongs to.

Texts sent for a wash

Rook sends texts on a wash's behalf only to people who have agreed to receive them from that wash.

• Message frequency varies by program.
• Message and data rates may apply.
• Reply STOP to stop texts from that wash at any time. Reply HELP for help.
• We do not sell or share mobile numbers or text consent with third parties or affiliates for their marketing. Text consent records are not shared with any third party.

How we share information

• With the wash the information belongs to.
• With service providers that run the platform for us, such as hosting, payment processing, text and email delivery and AI processing, which may use it only to provide their service to us.
• With ad platforms, only as the wash instructs: for example, hashed customer lists and conversion events sent to the wash's own Google or Meta account.
• When required by law, or as part of a merger or acquisition.

We do not sell personal information.

Retention and deletion

We keep a wash's information while it uses Rook and as needed to meet legal and accounting obligations. A wash can ask us to export or delete its data. Connected account tokens are deleted when the account is disconnected.

Security

We encrypt connected account tokens and other secrets, limit who can reach production data, and keep a log of every change Rook makes.

Your choices

You can stop texts by replying STOP. You can ask to access, correct or delete your information by emailing us; where Rook holds it for a wash, we may work with that wash on the request. Rook is not meant for children under 13 and does not knowingly collect their information.

Changes

If we change this policy, we will update the date above and, for material changes, tell washes before the change takes effect.

Contact

Email [email protected].