PRIVACY CONTROL PLANE
Data has a job.
Nothing more.
This Policy explains how RSAngel (“RSAngel”, “ActionDock”, “we”, “us”) handles personal data when you visit, buy, configure, or use ActionDock. It also explains the different roles we and our customers have when an AI agent acts through the Service.
Scope and data roles
This Policy applies to the ActionDock website, API, MCP endpoint, checkout flow, support, and related services (the “Service”). It does not govern third-party sites or services that you choose to connect.
RSAngel is the controller for account, subscription, support, product analytics, security, and compliance data. When a customer submits contact details, prompts, files, recipient data, call instructions, or other content for an agent to process, the customer normally determines the purpose and means of that processing. For that customer content, the customer is the controller or business and RSAngel acts as its processor or service provider, unless applicable law assigns the roles differently.
You must have a lawful basis and provide every notice or consent required before sending personal data to ActionDock.
Data we collect
Name, business name, email, plan, workspace identifiers, consent version and timestamp, support correspondence, and account status.
Order, subscription, tax location, refund, and transaction references received from Lemon Squeezy. We do not receive or store full payment-card details.
Prompts, instructions, contact information, generated text or media, uploaded files, delivery content, tool results, and artifacts needed to execute customer requests.
Email addresses, phone numbers, message content, delivery events, call metadata, provider identifiers, consent or suppression records, and any audio supplied or generated for a requested action.
API requests, action type, model and provider usage, timestamps, approximate cost, IP address, User-Agent, authentication events, errors, rate-limit events, and audit logs.
Basic server logs and essential storage needed for security and checkout continuity. We do not currently use third-party behavioural advertising trackers.
We receive data directly from customers and their agents, from people who contact us, from connected providers, and from Lemon Squeezy. Please do not submit special-category, highly sensitive, financial-account, health, biometric, precise-location, or government-identifier data unless it is strictly necessary, lawful, and covered by written terms with us.
How and why we use data
We use personal data to provide and secure the Service; authenticate users and agents; execute requested actions; route prompts and content to configured providers; calculate usage and balances; process subscriptions, refunds, and disputes; enforce suppression lists and safety controls; provide support; investigate misuse; maintain audit evidence; comply with law; and improve reliability.
Depending on the context and jurisdiction, our legal bases are performance of a contract, legitimate interests in operating and securing the Service, compliance with legal obligations, consent where required, and the customer’s documented instructions when we act as a processor.
ActionDock uses automated systems and third-party AI models to produce outputs and execute instructions, but RSAngel does not use customer data to make its own decisions that produce legal or similarly significant effects about individuals. Customers may not use the Service for prohibited high-impact automated decisions described in the Acceptable Use Policy.
Disclosures and service providers
We disclose data only as needed to operate the Service, follow customer instructions, complete a transaction, protect rights and safety, or comply with law. Current categories include:
Model generation, media creation, and related processing when a customer invokes those actions.
Telephony, voice routing, and message delivery when enabled and invoked.
Merchant of record for checkout, payments, tax, subscriptions, refunds, and chargebacks.
Cloud hosting, storage, networking, security monitoring, and email transport.
A current list of material subprocessors is available to customers on request where required by contract or data-protection law. We may replace a provider while preserving equivalent contractual and security obligations.
Providers may process data in countries other than yours. Where required, we rely on recognised transfer mechanisms, contractual safeguards, or another lawful basis. We may also disclose data in a corporate transaction, subject to confidentiality and applicable law.
We do not sell personal data. We do not share personal data for cross-context behavioural advertising.
Retention and security
Generated artifacts are ordinarily retained for the workspace’s configured retention period, currently 30 days by default, unless deleted earlier or a different plan setting applies. Account, agreement, billing, suppression, usage, security, and audit records may remain while the account is active and afterward for fraud prevention, dispute resolution, legal claims, tax, accounting, and other legal obligations. Backups are removed on their normal rotation.
We use access controls, encryption in transit, scoped credentials, tenant separation, signed provider events, rate limits, and operational monitoring. No system can be guaranteed completely secure. Customers are responsible for protecting API keys, connected accounts, devices, and recipient data and must notify us promptly of suspected compromise.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; and complain to a supervisory authority. Korean data subjects may exercise rights provided under the Personal Information Protection Act. EEA and UK data subjects may also contact their local data-protection authority.
Send a request from the email associated with your account to support@actiondock.app. We may verify identity and authority before acting. If your data was submitted by an ActionDock customer, contact that customer first; we will assist the customer as required by law and contract.
You may unsubscribe from ActionDock-enabled email using the link in the message where provided. This adds the address to the relevant customer’s suppression list. For telephony or other communications, tell the sender that you withdraw consent and contact us if assistance is needed.
Children and changes
The Service is designed for businesses and adults. It is not directed to anyone under 18, and customers may not use it to profile or target children.
We may update this Policy when the Service, providers, or law changes. We will post the new effective date and provide additional notice where required. Material changes do not apply retroactively where prohibited.
Privacy contact
RSAngel / ActionDock
Privacy contact and representative: Khan Svetlana
Business Registration Number: 580-50-00933
Address: 충청남도 아산시 신창면 천우물로 22, 101동 603호 (아산 삼부르네상스 더힐)
Email: support@actiondock.app