Privacy notice
Last updated: 2026-10-15
Rocwyn Digital Solutions is a marketing agency in the Kingdom of Bahrain. This app is where our team plans and runs marketing for our clients. This notice explains, in plain language, what personal data the app holds, why, and what rights you have under Bahrain's Personal Data Protection Law (PDPL).
Who is responsible
Rocwyn Digital Solutions decides how the data in this app is used. For leads collected for a client, the client is responsible for their own customers' data, and Rocwyn handles it on the client's behalf.
What we hold
- People who sign in: name, email, role, language, sign-in and two-factor records, and a log of actions taken in the app.
- Clients: business details, brand information, content plans, posts, results figures and files they share with us.
- Leads (people who contact a client): name, contact details, what they asked about, where they came from, and when and how they agreed to be contacted.
- Questionnaire answers and screenshots shared with the assistant.
Why we use it
- To deliver the marketing services our clients hired us for: planning content, getting approvals, following up leads and reporting results.
- To keep the app secure: checking who signs in, and keeping a record of important actions.
- We do not sell personal data, and we do not use leads' data for anything other than the client's own follow-up.
Consent for leads
A lead is only recorded with a note of how they agreed to be contacted. A lead can ask at any time to stop being contacted or to have their details erased.
Who else processes it
- Supabase stores the data and files (servers in Frankfurt, Germany, in the European Union).
- Vercel runs the app.
- Anthropic (Claude) writes drafts, summaries and answers from the information we give it. It does not use this data to train its models.
- Resend sends the app's emails.
- If you use voice typing in Google Chrome, Google turns your speech into text (this is part of the browser, not stored by Rocwyn).
- Each of these providers handles data only to provide its service to us, under its own security and data-protection terms.
How long we keep it
- Screenshots shared with the assistant: 14 days.
- Deleted items (calculations, images, content pillars, results measures, assistant conversations): 14 days in a bin, then removed.
- A lead's personal details: until the client no longer needs them, or immediately when the lead asks to be erased.
- Activity records: kept while an account or client is active. For a client archived, or a person deactivated, more than a year ago, Rocwyn reviews the records and approves their deletion.
- Backups are kept for a short period by our database provider.
How we protect it
Every person sees only the clients they work on; this is enforced in the database itself. Staff sign in with a password and a code from their phone (two-factor). Connections are encrypted, and sessions end after 7 days without use.
Your rights
Under the PDPL you can ask to see the personal data we hold about you, to correct it, to have it erased, or to object to its use. Write to us and we will reply within the time the law requires. You can also complain to Bahrain's Personal Data Protection Authority.
Contact
Email: salam.aitani@gmail.com