Security

Your business, kept to itself

Rooster knows a lot about your business. Here's how we make sure that stays between you and Rooster.

Isolated per business

Every record carries your business ID and the database enforces it. One business can't see, or be influenced by, another's data. Aggregate patterns (what works for plumbers in general) never include another business's content.

Encrypted, in transit and at rest

Connections to your accounts use each platform's official sign-in. Tokens are stored encrypted and never appear in logs or in what the AI reads.

No model training on your data

We use AI providers under terms that prohibit training on your content. Your reviews, customers and voice are used to do your work and nothing else.

Least privilege, by design

The part of Rooster that reads reviews and web pages cannot send anything. The part that drafts can only propose. The only thing that can publish is a separate step that requires your approval or an auto-send rule you turned on.

Facts are checked before you see them

Prices, hours, dates and offers in any draft are verified against your records. A mismatch is blocked. Every draft can show where its facts came from.

One switch

Pause everything from your phone. Disconnect any account from your settings or from the platform itself. Export your data any time. Delete your account and derived data is gone within 30 days.

Untrusted text stays untrusted

Reviews, web pages and event listings are written by strangers, and some of them contain instructions aimed at AI systems. Rooster treats all of it as data, never as commands. Nothing a review says can cause a message to be sent. The worst case is a bad draft sitting in your feed, which you'll see before anything happens.

Customer data

When you connect a job, booking or POS tool, Rooster reads the minimum needed: names, contact details you've collected, dates and services. We act as a service provider under state privacy laws, use the data only for your business, and never combine it across customers. Businesses subject to health privacy law should contact us before connecting appointment data.

Reporting a problem

Email hello@rooster.example with "security" in the subject. We acknowledge within one business day.

Formal certifications are on our roadmap. Ask us for the current status before relying on this page for a compliance review.

Wake up to customers

Set up in ten minutes tonight. Tomorrow morning, your first six tasks are waiting for a tap.