RocSite is operated by RocSite, Inc., a Delaware corporation ("RocSite", "we"). RocSite is a workspace for organizations. Your employer or organization (the "organization") invites you into it and is the controller of the data inside its workspace; RocSite operates the service on the organization's behalf. If you open a workspace for yourself, you are that organization. RocSite is for people aged 18 and over and is not directed to children.
Every database record in RocSite belongs to exactly one organization. On the tenant tables that boundary is enforced by the database itself (row-level security), not by application code alone, so people in one organization are not given another organization's records through the app. Files, backups, logs, email delivery, payments and outage answers are protected by other access controls and by the service providers' contracts described below. No system is perfectly secure.
Your content is never used to train any model unless you turn on Help improve RocSite with my data in Settings (off by default). Assistant, search, and transcription features answer on RocSite's own hardware. If both of our sites are unreachable, RocMagic pauses and says so. A workspace owner may turn on Emergency backup in Settings (off by default): then, and only while both of our sites are unreachable, an Ask answer for that workspace may come from a listed subprocessor under a no-retention agreement and is labelled as a backup answer. What is sent for that answer is the Ask conversation: the question, earlier turns, the retrieved passages and RocMagic's instructions. A workspace owner may also connect their own provider account; that choice is shown on screen. AI output is generated assistance for your organization's own content; it is not a professional, medical, or legal opinion. Standard plans are not for protected health information, privileged communications, or other regulated data. See Your data in the Terms for the Help improve RocSite setting (off by default); data received from Google is never used that way.
When you connect a Google account, RocSite accesses only the data needed for the features you turn on: your email address (to show which account is connected), your Gmail messages (to read, search, mark as read, move to Trash and send mail from the Email app), your Google Drive files (read-only, to search and summarize them, or to copy a file into RocSite so you can edit the copy; we never change your file in Google Drive) and your Google Calendar (read-only, to show your events). We use Google user data only to provide those features to you and to secure the service. We do not sell Google user data, use it for advertising, or use it to develop, improve or train any AI model, and this also covers anything derived from it, such as summaries and search indexes; the Help improve RocSite setting never includes it. People at RocSite do not read it unless you give specific consent for a support request, it is necessary for security, the law requires it, or it has been aggregated and anonymized for internal operations. You can disconnect at any time in Settings → Connectors, and we then delete the stored tokens; to have the Google data already imported into your workspace deleted, delete it in the app or email [email protected] and we will delete it. RocSite's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Content is retained while the organization's workspace is active. Organization admins can export their workspace data and can permanently purge the workspace from inside the app. To exercise access or deletion rights over your own data in a workspace, ask your organization's admin, or contact us and we will help the organization answer it. For the data we use for our own purposes (your account, billing, security and legal compliance), RocSite decides how it is used; send requests about it to [email protected] and we will answer them directly.
All traffic to the service is encrypted in transit (HTTPS). Access to the app is authenticated; there are no anonymous accounts. No system is perfectly secure, and we cannot guarantee that data will never be accessed without authorization; if a breach affects your data we will tell the organization as the Data Processing Addendum sets out.
Some apps work with health, clinical or scientific information. They are for research, education and administrative use only, and RocSite is not a health care provider. Do not put protected health information or identifiable patient information into a standard workspace; it may be processed only in a Dedicated deployment under a signed HIPAA business associate agreement. See the Terms, section 5.
If this policy changes materially we will update this page and its effective date, and tell workspace owners by email or in the app at least 30 days before the change takes effect.
RocSite, Inc. · Orlando, Florida · [email protected]