This Privacy Policy (the “Policy”) describes how VR Resolutions LLC, a New York LLC doing business as Max Rocket AI (“Provider,” “we,” “us,” or “our”), collects, uses, discloses, and protects information in connection with the websites located at maxrocket.ai and any associated subdomains, applications, autonomous AI agents, dashboards, widgets, hosted features, automations, AI tools, deliverables, managed services, and related support offerings (collectively, the “Services”). This Policy applies to clients, end users, website visitors, and other individuals whose information we receive in connection with the Services (“you”).

By accessing or using the Services, you agree that your information will be handled as described in this Policy. This Policy is incorporated into and supplements our Terms & Conditions, and capitalized terms not defined here have the meanings given to them in the Terms & Conditions. If there is a conflict between this Policy and the Terms & Conditions with respect to the subject matter described here, this Policy controls.

PLEASE READ THIS POLICY CAREFULLY. IF YOU DO NOT AGREE WITH ANY PART OF IT, DO NOT ACCESS OR USE THE SERVICES.

1. Scope and Roles

This Policy applies to information we collect through the Services, our marketing channels, and our business operations. Different parts of the Services may involve different roles for Provider under applicable privacy laws.

Where Provider acts as a controller — such as for our own marketing, sales, billing, account administration, and operational analytics — Provider determines the purposes and means of processing and is responsible for the practices described in this Policy.

Where Provider acts as a processor or service provider — such as when we operate AI agents, automations, chatbots, voice agents, or marketing services on a client’s behalf — the client is the controller or “business,” and Provider processes personal information only on the client’s documented instructions and as permitted by the Terms & Conditions or any applicable data-processing terms. In those cases, the client’s own privacy notices govern the collection and use of personal information from the client’s end users, leads, recipients, and visitors.

2. Information We Collect

We collect information directly from you, automatically through your use of the Services, and from third parties that integrate with or refer business to us.

2.1 Information You Provide

We collect information you provide when you visit our websites, request information, sign up for an account, complete checkout, configure or deploy an AI agent, contact support, respond to surveys, or otherwise interact with us. This may include your name, business name, email address, phone number, mailing or billing address, role or title, payment information (handled by our payment processors), login credentials, account preferences, and any business context you provide — such as company information, industry, customer profiles, sales scripts, brand voice, knowledge-base content, FAQs, voice-agent prompts, or other operational data — used to train, configure, or instruct your AI agent or other Services.

2.2 Information Collected Automatically

When you access the Services, we and our service providers automatically collect certain information through cookies, pixels, server logs, SDKs, and similar technologies. This may include your IP address, device and browser type, operating system, language settings, referring URL, pages and features viewed, links clicked, session duration, approximate location derived from IP address, and timestamps. We may combine this information with other information we hold about you.

2.3 Service Data and Agent Activity

In the course of providing the Services we generate, collect, and receive a variety of operational data, including configuration data, usage logs, performance metrics, prompts and completions, agent transcripts, call recordings, automation runs, reporting outputs, audit records, error logs, support communications, and similar information (collectively, “Service Data”). Our license to use Service Data — including in de-identified or aggregated form for purposes such as operating, securing, benchmarking, debugging, evaluating, and improving the Services and underlying models — is set out in the Terms & Conditions.

2.4 Information from Third Parties

We may receive information about you from third-party platforms, integrations, advertising networks, analytics providers, payment processors, identity verification providers, telephony carriers, and resellers or referral partners. The information we receive depends on your settings on those services and the integrations you authorize.

3. How We Use Information

We use information for the following purposes:

• Provide the Services. Operate, maintain, and deliver the Services; create and manage accounts; configure, deploy, and run AI agents and automations; process payments; communicate with you about your account and your use of the Services; and provide customer support.

• Personalize and improve. Tailor agent behavior, content, recommendations, and experiences; understand how the Services are used; debug and diagnose issues; and develop new features and offerings.

• Service Data and AI improvement. Use Service Data, including in de-identified or aggregated form, to operate, secure, benchmark, evaluate, and improve our Services and the software, machine-learning models, AI models, chatbots, voice agents, automations, and analytics used to deliver them, in accordance with the Terms & Conditions.

• Communications. Send service notices, billing notices, security alerts, transactional messages, onboarding communications, and — where permitted — marketing emails, newsletters, product updates, and promotional content. You can opt out of marketing communications as described below.

• Analytics and research. Conduct research, generate benchmarks and aggregated statistics, evaluate model and Service performance, and produce internal reporting and insights.

• Trust, safety, and security. Detect, investigate, and prevent abuse, fraud, prompt-injection attempts, unauthorized use, security incidents, and policy violations; enforce our Terms & Conditions; and protect the rights, property, and safety of Provider, our clients, and others.

• Legal and compliance. Comply with applicable law, legal process, and regulatory obligations; respond to lawful requests from public authorities; and exercise or defend legal claims.

• Business operations. Manage corporate functions, accounting, audits, recordkeeping, business continuity, and corporate transactions such as financings, mergers, acquisitions, asset sales, or bankruptcy proceedings.

4. How We Share Information

We may share information in the following circumstances:

• Service Providers. With third-party vendors, contractors, and service providers that perform functions on our behalf — including cloud hosting, infrastructure, large language model and AI providers, payment processing, email and messaging delivery, analytics, customer support, telephony, and security — subject to confidentiality and use restrictions appropriate to the services they provide.

• Third-Party Platforms. With Third-Party Providers (as defined in our Terms & Conditions) where required to deliver Services that depend on, integrate with, or are delivered through those platforms, including Google, Meta, Microsoft, OpenAI, Anthropic, listings networks, payment processors, and telephony carriers. Those providers process information under their own terms and privacy policies.

• Affiliates. With our affiliates and subsidiaries for the purposes described in this Policy. Their use of information remains subject to this Policy.

• Clients (where Provider is a processor). Where you interact with the Services as an end user, lead, recipient, or visitor of one of our clients, we share relevant information with that client, who is the controller of that information.

• Legal Process and Protection. With courts, regulators, law enforcement, or other parties when we believe disclosure is necessary or appropriate to comply with law, respond to legal process, enforce our agreements, or protect the rights, property, or safety of Provider, our clients, or others.

• Business Transfers. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, asset sale, bankruptcy, or similar transaction, in which case information may be transferred as part of the transaction.

• Aggregated or De-Identified Information. With third parties for marketing, research, model development, benchmarking, or similar purposes, where the information has been aggregated or de-identified so that it does not reasonably identify a specific individual or business.

• With Your Direction. With other parties where you direct us to do so or otherwise consent.

We do not sell personal information for monetary consideration. To the extent any disclosure described above qualifies as a “sale” or “share” for cross-context behavioral advertising under applicable U.S. state privacy laws, you may exercise the opt-out rights described in Section 9.

5. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, web beacons, clear GIFs, SDKs, and similar technologies to operate the Services, recognize you across sessions, remember your preferences, measure usage and performance, support security, and deliver and measure marketing. Some technologies are essential to deliver the Services; others are used for analytics and advertising and can be controlled through your browser settings or other opt-out tools.

We use third-party analytics services, including Google Analytics, to evaluate use of the Services. These providers may use cookies and similar technologies to perform their services. We do not knowingly permit them to use information collected through the Services to track you across unrelated third-party sites for their own purposes.

Our Services do not currently respond to browser “Do Not Track” signals. You may opt out of certain third-party advertising through the Network Advertising Initiative at www.networkadvertising.org/optout_nonppii.asp and the Digital Advertising Alliance at www.aboutads.info/choices.

6. AI Agents, Inputs, and Outputs

Max Rocket AI deploys autonomous AI agents that operate on your behalf or on behalf of our clients. When you instruct, configure, or interact with an agent, your prompts, instructions, business data, and the outputs the agent generates may be processed by us and by underlying large language model providers and other Third-Party Providers. We use Service Data — including, in de-identified or aggregated form, prompts, completions, transcripts, and operational data — to operate, secure, evaluate, and improve the Services and underlying models, as further described in our Terms & Conditions.

You are responsible for ensuring that any data you provide to an agent — including information about third parties, customers, contacts, or other end users — has been collected, shared, and used in compliance with applicable law and your own privacy notices and consents. AI-generated outputs may be inaccurate, incomplete, outdated, fabricated, or unintended; you are responsible for the scripts, knowledge inputs, responses, automations, and outputs of any AI agent you operate, configure, or deploy through the Services.

AI AGENTS CAN MAKE MISTAKES. CLIENT IS SOLELY RESPONSIBLE FOR THE CONTENT, BEHAVIOR, AND OUTPUTS OF ANY AI AGENT IT CONFIGURES, DEPLOYS, OR USES THROUGH THE SERVICES, AND FOR ENSURING THAT ALL USE COMPLIES WITH APPLICABLE LAW, INCLUDING CALL-RECORDING, AI-DISCLOSURE, TCPA, AND CARRIER RULES.

7. Communications and Marketing

We may send service notices, account and billing communications, security alerts, onboarding communications, support communications, and marketing emails. You may opt out of marketing communications by following the unsubscribe instructions in any marketing email or by contacting us using the details below. It may take up to ten (10) business days to process opt-out requests. Even after opting out of marketing communications, you may continue to receive transactional, account, security, operational, and service-related communications.

Where the Services enable outbound communications on a client’s behalf — including SMS, MMS, voice calls, prerecorded messages, AI-generated voice calls, chatbots, or email campaigns — the client is responsible for compliance with the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act, A2P 10DLC rules, state telemarketing and AI-call laws, and any other applicable communications laws and platform rules, as set out in the Terms & Conditions.

8. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including providing the Services, operating our business, complying with legal, tax, accounting, and reporting obligations, resolving disputes, enforcing our agreements, and supporting security and fraud-prevention purposes. We may retain information for longer where required or permitted by law or where we reasonably believe there is a prospect of litigation.

Upon discontinuation of a Service, we may delete databases, hosted assets, call logs, chatbot and voice-agent logs, reporting data, configuration records, and other information associated with that Service, except where retention is required by law or we elect to retain such data for operational, billing, evidentiary, backup, or compliance purposes. We may retain information indefinitely in de-identified or aggregated form.

9. Your Privacy Rights

Depending on where you reside and the role we play in processing your information, you may have rights under applicable privacy laws — including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), other U.S. state privacy laws, the EU and UK General Data Protection Regulation (GDPR/UK GDPR), Canada’s PIPEDA, and Brazil’s LGPD. These rights may include the right to access, correct, delete, port, or restrict processing of your personal information; to opt out of certain processing such as targeted advertising, sale, or sharing; and to withdraw consent.

To exercise these rights, contact us at support@maxrocket.ai. We will verify your request as required by applicable law and respond within the timeframes the law requires. We will not discriminate against you for exercising your rights. Where Provider acts as a processor or service provider on behalf of a client, requests should be directed to that client; we will assist the client in responding as required by applicable law and our agreements with them.

If you have an unresolved concern, you may have the right to lodge a complaint with a data protection authority in your jurisdiction.

10. Children

The Services are intended for businesses and adults at least eighteen (18) years old. We do not knowingly collect personal information from children under the age of thirteen (or the equivalent minimum age under applicable law). If you believe a child has provided us with personal information, please contact us so we can delete it.

11. International Transfers

We are based in the United States, and we and our service providers may process information in the United States and other countries that may have different data protection laws than your country of residence. Where required by law, we use appropriate transfer mechanisms — such as standard contractual clauses or other approved safeguards — to protect personal information transferred internationally. By using the Services, you consent to the transfer, storage, and processing of your information in the United States and other jurisdictions where Provider, its affiliates, or its service providers operate.

12. Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. No method of transmission over the internet or electronic storage is fully secure, however, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs through your account or through systems connected to it.

13. Third-Party Services and Links

The Services may contain links to, or be integrated with, third-party websites, platforms, and services not operated by Provider. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy notices of any third-party service you use in connection with the Services.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and post the updated Policy on the Services. If we make material changes, we will provide additional notice as required by applicable law, such as by email to the address associated with your account or by an in-product notice. Your continued use of the Services after the effective date of an updated Policy constitutes your acceptance of the changes.

15. Contact Us

If you have questions, concerns, or requests regarding this Policy or our privacy practices, you may contact us at:

VR Resolutions LLC d/b/a Max Rocket AI

PO Box 51, Hewlett, NY 11557

Email: support@maxrocket.ai