Privacy Policy

Roux is operated by Caldwell Growth Partners, LLC d/b/a GUMBO ("Roux," "we," "us," or "our"). This Policy applies to helloroux.com, the Roux application, and the Roux connectors for ChatGPT and other compatible AI clients. For the personal information described here, Roux is the controller unless we process it solely on behalf of a customer under a separate agreement.

Connected AI clients are separate services operated by their respective providers. Their collection and use of information in your AI-client account is governed by their respective privacy policies, not this one.

We may collect account details such as your name, email address, profile data, workspace membership information, authentication identifiers, and settings. We also collect content you submit to Roux, including prompts, interview configurations, responses, notes, files, and any data retrieved through integrations you connect.

We may also collect technical and usage information such as log data, browser and device information, approximate location inferred from network signals, request metadata, session and cookie data, and information about how you interact with the Service.

When you connect Roux to an AI client, we receive OAuth identity data (currently your user identifier, email address, and basic profile), the identity of the OAuth client, the workspace you authorize, access-token claims, and tool requests sent to Roux on your behalf. A request may include text you enter in the AI client and identifiers or parameters needed to find, create, or update a Roux. We return only the workspace data and tool result needed to fulfill that request.

We may collect billing and transaction details, such as plan, payment status, and transaction identifiers. Payment-card details are collected and processed by our payment provider and are not stored by Roux.

We use information to provide and secure Roux, authenticate users, operate interviews and collaboration workflows, process AI-assisted features, support integrations, maintain the Service, prevent abuse, troubleshoot issues, comply with legal obligations, and improve product performance and reliability.

We do not sell personal information, share it for cross-context behavioral advertising, or use content obtained through AI-client connectors for advertising. We do not use Customer Content to train our own general-purpose AI models. We do not use an AI-client request for a materially different purpose without notice and, where required, consent.

Connecting an AI client authorizes it to call Roux tools using your Roux account. During OAuth you select one workspace for that connection. The connector can read data from that workspace and, when you request a write action, may create or update Roux records there. Tool responses can be included in your conversation with the AI client. Roux does not receive your entire conversation unless the client sends particular content as part of a tool request.

You can revoke access by disconnecting Roux in your AI client. You can also contact us for help revoking a connection. Revocation stops new connector requests but does not remove information already retained by the AI client under its policies or records Roux must retain for the reasons described below.

Some features of Roux rely on third-party infrastructure and AI providers to process prompts, interview content, and related inputs in order to generate output. We also use third-party hosting, database, identity, analytics, email, and integration providers as needed to operate the Service. Those providers may process personal information on our behalf subject to their own terms and data handling practices. Depending on the feature you use, categories of providers include cloud hosting and database services, authentication, AI inference, payment processing, transactional email, analytics and error monitoring, and customer-selected integrations.

AI providers may retain or use inputs and outputs according to the service configuration and contract applicable to Roux. We contractually or technically limit service providers to processing information for the services they provide to us where required by law.

We may share information with service providers and subprocessors that help us operate Roux, with third-party services you choose to connect, within your organization or workspace as part of the Service, in connection with a merger, acquisition, financing, or sale of assets, or when required by law, legal process, or to protect rights, safety, and security.

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and business records. Retention periods may vary based on the type of data, your workspace configuration, and applicable law.

OAuth workspace grants and related credentials are retained while the connection is active and are deleted or disabled when the connection or underlying account is removed, subject to limited security, backup, fraud-prevention, and legal-retention periods. Account and workspace content remains until you or an authorized workspace administrator deletes it, the account is deleted, or it is no longer needed to provide the Service. Backup copies may persist for a limited period before being overwritten.

Roux uses cookies and similar technologies to maintain authenticated sessions, remember workspace and product preferences, improve reliability, and understand how the Service is used. If you disable cookies, parts of Roux may not function correctly.

We use reasonable administrative, technical, and organizational safeguards to protect information processed by Roux. No system is perfectly secure, and we cannot guarantee absolute security.

Depending on your relationship to Roux and applicable law, you may be able to access, update, correct, export, or delete certain information. You may also be able to disconnect integrations, manage cookies through your browser, or ask your workspace administrator to update or remove your information.

Depending on where you live, you may also have rights to restrict or object to processing, receive a portable copy, withdraw consent, appeal a denied request, or complain to a data-protection authority. Where applicable, we process information to perform our contract with you, comply with law, protect legitimate interests such as security and product reliability, or with your consent. Withdrawing consent does not affect earlier lawful processing.

Submit a request through the account settings or email support@helloroux.com. We may verify your identity and authority before fulfilling it. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.

Roux is not designed to collect passwords, authentication codes, payment-card numbers, government identifiers, or protected health information through connector prompts. Please do not send those types of information through Roux unless a feature expressly requests them and provides an appropriate notice.

Roux is not directed to children under 13, and we do not knowingly collect their personal information. You must also be old enough to consent to processing in your jurisdiction, or use Roux through an organization that is legally authorized to provide it to you. Contact us if you believe a child provided personal information without appropriate authorization.

Information processed through Roux may be transferred to and processed in countries other than the one in which you live. Where required, we take reasonable steps to support appropriate safeguards for those transfers.

We may update this Privacy Policy from time to time. When we do, we will post the revised version here and update the effective date above. Your continued use of Roux after an update becomes effective constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how information is handled in Roux, visit our support page or email us at support@helloroux.com.