What Roy collects
Roy processes account and business details, verified phone numbers, messages sent to Roy, connection settings, support requests, security records, and service records needed to provide and protect Roy.
After an owner approves access and confirms the business, Roy reads Square business information, customers, invoices, and payments. Roy does not make changes in Square or process charges or refunds.
When an owner connects Jobber, Roy reads Clients, Quotes, Jobs, Invoices, and Payments from that Jobber account. Roy’s current Jobber connection is read-only and does not make changes in Jobber.
When an owner connects QuickBooks Online, Roy reads only the connected company’s Company information, Customers, Estimates, Invoices, and Payments. A verified owner may approve one exact Customer creation or update. Roy does not request bank-account, payroll, tax-return, card, or QuickBooks Payments information.
When an owner connects QuickBooks Desktop, the owner’s own computer sends Roy the same Company information, Customers, Estimates, Invoices, and Payments through QuickBooks’ own connection app. Roy does not change the company file. The owner’s setup code is stored only in a form Roy cannot read back.
When an owner connects Google Workspace, Roy reads Gmail messages and Google Calendar events through the same approved connection. A verified owner may approve one exact email send or Calendar creation, update, or cancellation.
When an owner connects Airtable, Roy reads how one owner-confirmed workspace is organized and stores only the columns the owner confirms for clients, quotes, jobs, invoices, or payments. Roy listens for changes in that workspace and may create or update a chosen record only after a verified owner approves that exact change. Roy does not delete records, change the workspace or its columns, use other workspaces, tables, or columns, or read attachments.
How information is used
- Authenticate users and keep each business’s records isolated from every other business.
- Keep owner-approved records up to date, answer questions, show where answers came from, prepare reminders or summaries, and make one exact change approved by a verified owner.
- Maintain connection health, investigate errors, prevent abuse, and respond to support or security requests.
- Meet legal obligations and enforce the service terms.
Roy does not sell customer data, use it for targeted advertising, or share one customer’s identifiable records with another customer. Square, Jobber, Google Workspace, QuickBooks, and Airtable data are not used to train a model shared across Roy customers.
Text messaging
People opt in to Roy’s text-message service by texting Roy and replying SETUP to the welcome message. Roy sends recurring service messages such as replies to the person’s requests, account and setup notices, and requested business-status updates. Message frequency varies with each person’s conversations and account activity. Message and data rates may apply. Reply STOP to opt out or HELP for help.
Roy does not share mobile numbers, text-message opt-in data, or consent with third parties or affiliates for their marketing or promotional purposes. Roy shares this information only with the service providers described below when needed to deliver messages, operate Roy, protect accounts, or comply with law.
Website analytics
On Roy’s public website, visitors are asked before Google Analytics starts. If a visitor allows it, Google Analytics receives the public page visited, general connection, browser, and device information, and interactions such as scrolling or opening an outside link. It may use a measurement cookie to distinguish one visit from another. Roy sends the public page address without search details added to it.
Google Analytics does not run on Roy’s private dashboard or one-time dashboard links. Roy does not send names, messages, or connected business records to Google Analytics and does not use this information for advertising. Choosing “No thanks” prevents Google Analytics from loading.
Roy saves the visitor’s choice on that device. Visitors can review the choice at any time using the button below. Google explains how it handles information from sites that use its services in How Google uses information from sites or apps that use our services.
Artificial intelligence and service providers
Roy is an AI-assisted service. Relevant business messages and facts from connected apps may be sent to Google Gemini to answer an owner’s request or prepare a business-specific reminder. Roy keeps links to the records behind an answer and avoids making a claim when the information is out of date, conflicting, incomplete, or uncertain.
Roy uses other companies only to operate the service: Google Cloud hosts and runs Roy; Neon stores data; Google Gemini processes AI requests; Linq, Meta WhatsApp, Twilio, or Telegram carries messages; Resend supports security and account email; Cloudflare helps route website traffic safely and provides the security check that protects sign-in code requests from automated abuse; and Google Analytics measures public website visits after a visitor allows it. Square provides the Square connection, Jobber provides the Jobber connection, Google provides the Workspace connection, Intuit provides QuickBooks Online and QuickBooks Desktop, and Airtable provides Airtable. Each company processes only the information needed for its role.
Storage, retention, and deletion
Saved sign-in access is encrypted and limited to the business that approved it. Copies of connected records may be kept for up to 24 months while the service is active. When Square, Google Workspace, QuickBooks, or Airtable is disconnected, Roy immediately stops new reading and changes, removes its saved access, and stops using that app’s information for new AI requests. Copies of the connected records enter a 30-day deletion period and are then erased. Roy may keep a limited note that a change, approval, deletion, or security event happened without keeping the connected content itself.
A verified business owner may request earlier deletion of the business and its connected data. Backups age out under the service’s recovery schedule and are protected from restoring erased data into active use.
Owner choices and requests
Business owners can disconnect Square, Google Workspace, QuickBooks, or Airtable from Roy’s Connections page. They may also remove Roy directly in Google or QuickBooks Online, or remove Roy from QuickBooks’ connection app on their own computer. Airtable does not let Roy remove its own access on the owner’s behalf, so an owner who disconnects Airtable from Roy must also open Airtable’s account Integrations settings and remove Roy there. Owners can request a copy, correction, transfer, or deletion of their information by emailing security@tryroy.ai. Roy may need to verify the requester’s identity and authority over the business before acting.
Security and incidents
Roy encrypts information while it moves and while it is stored, limits access to what each person and service needs, keeps each business separate, verifies incoming account updates, renews access protections, records important security events, and monitors for problems. No system is perfectly secure. If an incident affects customer information, Roy will investigate, contain it, notify affected customers and authorities when required, report QuickBooks-related incidents to Intuit, and notify Airtable within 48 hours of a relevant suspected incident as required by Airtable’s developer terms.
Contact and updates
Questions or complaints about this policy can be sent to security@tryroy.ai. Material changes will be posted here with a new effective date, and customers will be notified when required.