These are the third parties RocSite uses to deliver the service, and exactly what each one handles. We keep this list short on purpose.
| Subprocessor | What it does | What it processes |
|---|---|---|
| Cloudflare | Network delivery, TLS, DNS, access control, and object storage (R2) for uploaded files. | Network metadata for every request (IP address, user agent, requested URL), and the content of files uploaded to a workspace. |
| Fly.io Fly.io, Inc. |
Application hosting for app.rocsite.ai: the servers that run the RocSite app. Region: United States. | Everything a workspace sends to or receives from the app, while it is being handled. |
| Neon Neon, Inc. |
Managed database for app.rocsite.ai. Region: United States. | The workspace's records: accounts, documents' text and metadata, wiki, CRM, notes, settings and activity. |
| Stripe | Payment processing for subscriptions. | Billing contact details and payment information. Card numbers go directly to Stripe; RocSite never receives or stores them. |
| Resend | Transactional email: workspace invitations, sign-in and account mail, receipts. | Recipient email address and the contents of that message. Not used for workspace content generally. |
| Emergency backup Ask answers only |
Emergency backup for Ask answers only: used only for a workspace whose owner turned on Emergency backup in Settings (off by default), and only while both of RocSite's own sites are unreachable; it may then answer instead of RocMagic pausing. Not used for ordinary answers or any other feature. Retention: none (zero data retention). Region: United States. | The Ask conversation for that answer: the question, earlier turns of that conversation, the passages RocMagic retrieved for it, and the instructions RocMagic follows. Nothing else from the workspace. |
Your content is never used to train any model unless you turn on Help improve RocSite with my data in Settings (off by default; Google data is never included). Ordinary answers run on hardware RocSite owns and operates. If both of our sites are unreachable, RocMagic pauses and says so. Emergency backup is off by default: only when a workspace owner turns it on in Settings, and only while both of our sites are unreachable, an Ask answer for that workspace may come from the emergency backup provider in the table above, under a no-retention agreement, and is labelled as a backup answer on screen. The app and its database are hosted by Fly.io and Neon (above); RocSite's own hardware generates the answers. Adding or replacing a subprocessor still takes the 30-day notice in the DPA.
We give at least 30 days' notice before adding or replacing a subprocessor. Customers may object on reasonable data protection grounds as described in the DPA. We email that notice to every workspace owner; to add another address, such as a privacy contact, email [email protected].
RocSite, Inc. · Orlando, Florida · [email protected]