Privacy Policy

Effective 2026-08-04 · applies to the RocSite web, desktop-installed (PWA), and mobile apps and to app.rocsite.com

RocSite is a workspace for organizations. Your employer or organization (the "organization") invites you into it and is the controller of the data inside its workspace; RocSite operates the service on the organization's behalf.

What we collect

• Account information, your name, work email address, and a password (stored only as a salted hash).
• Content you and your organization put into the workspace, documents and files, notes, wiki and board entries, CRM and calendar records, chat messages, meeting recordings and their transcripts, and, only if your organization connects a mailbox, email accessed over that connection to provide the email features.
• Service and audit records, sign-ins, administrative actions, and feature usage, kept in an audit ledger so organization admins can see what happened in their own workspace, and operational logs needed to run and secure the service.
• Billing, subscription payments are processed by Stripe. RocSite does not store card numbers.

What we do not do

• No advertising, and no advertising or cross-app tracking SDKs in the app.
• We do not sell personal data, and we do not share it except with the service providers below acting on our instructions.

How data is scoped

Every record in RocSite belongs to exactly one organization, and that boundary is enforced by the database itself (row-level security), not by application code alone. People in one organization cannot see another organization's data, and an application bug cannot widen that boundary.

AI features

Assistant, search, and transcription features process workspace content with AI models running on infrastructure operated for RocSite. Where a specific feature uses a third-party model provider, content is sent to that provider only to provide that feature, and never for advertising. AI output is generated assistance for your organization's own content; it is not a professional, medical, or legal opinion.

Service providers

• Stripe, payment processing.
• Cloudflare, network delivery, access control, and file storage (R2).

Retention, export, and deletion

Content is retained while the organization's workspace is active. Organization admins can export their workspace data and can permanently purge the workspace from inside the app. To exercise access or deletion rights over your own data, ask your organization's admin, or contact us directly and we will route the request to the controller.

Security

All traffic to the service is encrypted in transit (HTTPS). Access to the app is authenticated; there are no anonymous accounts.

Changes

If this policy changes materially we will update this page and its effective date.

Contact

RocSite · [email protected]