Data Protection
These terms describe how Rose Tech HQ LLC processes the personal information an organization puts into Rose, and form part of the Terms of Service. If an organization has signed a separate data processing agreement with us, that agreement controls where it conflicts with this page.
1. Roles
The organization decides what information goes into its workspace and why; for that information it is the business (or controller), and Rose Tech HQ LLC is its service provider (or processor). For the account information of the people who sign in, we act on our own behalf, as the Privacy Policy explains.
2. Processing only on the organization's instructions
We process an organization's information only to provide, secure and support Rose for it, as these terms and its use of Rose's features direct. We do not sell it, use it for advertising, or combine it with other organizations' information, except in de-identified, aggregated form to operate and improve the platform.
3. Our people
Only staff who need it to run, secure or support the service can reach customer information, and they are bound to keep it confidential. Our support team sees a workspace only with a one-time code from one of its Owners, read only, and makes changes only with an Owner's approval; each session is recorded in the organization's Audit Log.
4. Security
We keep technical and organizational measures in place to protect the information, including encryption in transit and at rest, separation between organizations enforced by the database, multi-factor sign-in and audit logging. They are described in the Trust Center.
5. Subprocessors
We use the providers below to run Rose. Each receives only what its function needs and is bound by a contract that limits its use of the information. Providers marked “when connected” receive information only when an organization or person connects that service.
| Provider | Purpose | Information |
|---|---|---|
| Supabase | Database, file storage, and sign-in (accounts, passwords, multi-factor authentication) | All workspace data and files; sign-in records |
| Vercel | Application hosting | Data passing through the application, request logs |
| Anthropic | Rose's assistant, AI features and Library search | The content a feature works on (such as a question, a message or a document) |
| AssemblyAI | Meeting transcription | Audio of recorded Team Up calls |
| LiveKit | Video and audio calls | Call audio, video and participants |
| Resend | Email delivery | Recipient address and message content |
| Browser push services | Notification delivery | Notification text |
| U.S. National Weather Service | Weather alerts | The area chosen for alerts |
| Google, Microsoft, Calendly | Calendar and mail, when connected | The connected account's calendar and mail |
| Intuit QuickBooks, Zoho Books | Accounting, when connected (read only) | The connected company's accounting records |
We will post a new subprocessor here before it starts processing customer information. An organization that objects to a new subprocessor can tell us, and we will work with it in good faith.
6. Helping with people's requests
If someone asks us to access, correct or delete information an organization holds about them, we will pass the request to the organization and help it respond. Organizations can correct and delete most information themselves in Rose.
7. Security incidents
If we confirm a breach of security that leads to unauthorized access to an organization's information, we will tell the organization without undue delay, describe what we know, and help it meet any notice obligations it has.
8. Where information is processed
Information is stored and processed in the United States.
9. At the end of the service
When an organization closes its account, it can ask us for an export of its information. We then delete or de-identify it, except what we must keep by law; any copies in backups are removed as those backups expire.
10. Questions and reviews
We will answer an organization's reasonable questions about how its information is protected, and share the security information we can. Write to admin@paragonroofingsolutions.com.
11. Contact
Rose Tech HQ LLC · 4 Haddonfield Rd, Cherry Hill, NJ 08002 · admin@paragonroofingsolutions.com