Privacy Policy

1. Who we are and what this covers

Rose Tech HQ LLC owns and operates Rose. Businesses (each an “organization”) use Rose for their own work. Every organization has its own private workspace, kept apart from every other organization's.

• People who use Rose (employees, contractors and partners an organization invites): we are responsible for your account information.
• Information an organization puts into Rose (its projects, tasks, documents, meeting records, financial data and the like): the organization decides how it is used, and we process it on its behalf and under its instructions, as set out in our Data Protection terms. If you have a question about that information, you can contact the organization or us; we will help direct your request.

2. Information we collect

• Account information: name, email address, role, team, sign-in details and security settings (such as an authenticator app used for multi-factor sign-in). We do not receive or store the password of any account you connect.
• Content you create in Rose: projects, tasks, comments, agendas, chat messages, documents and their versions, travel plans, request forms and settings.
• Calendar data, when you connect a calendar: your calendars and their events, which may include titles, descriptions, times, locations, attendees, organizers, responses and conferencing links.
• Mail data, when you connect a mail account: your messages, folders and contacts, which may include senders and recipients, subjects, body text, attachments and timestamps.
• Meeting records, when a Team Up call is recorded: the audio, a transcript and the action items drawn from it. Participants are told before recording begins.
• Accounting data, when an organization connects its books: the chart of accounts, general-ledger and profit-and-loss data (dates, descriptions, amounts and accounts), and the connected company's name and identifier.
• Authorization tokens issued by the providers you connect, so Rose can keep your connections in sync.
• Location you choose for weather alerts, such as a service area.
• Technical information: IP address, browser and device type, pages visited and actions taken, kept in security, audit and error logs; and, if you turn on notifications, the push subscription your browser gives us.

3. How we use information

• To provide Rose: projects, tasks, meetings, agendas, chat, travel, documents and reporting for each organization.
• To show your calendars and mail in Rose, and to create, change and send events and messages when you tell it to.
• To present an organization's financial reporting and check it against the accounting system it came from.
• To keep accounts and data secure: verifying sign-ins, requiring multi-factor sign-in, preventing abuse and keeping audit logs.
• To support users, fix problems and improve the platform.
• To comply with law and enforce our terms.

We do not sell personal information, and we do not use it for advertising.

4. Google user data and Limited Use

When you connect a Google account, Rose asks for access to your Google Calendar (to show your calendars and events and to create or change events when you tell it to) and to your Gmail (to show your mail, organize it, and send messages you write or approve), plus your name and email address.

5. Accounting data, read only

When an organization connects QuickBooks Online or Zoho Books, Rose uses that access to read. Rose does not create, change or delete anything in your accounting system. Connecting books is limited to people with finance-administration rights, and the imported figures are visible only to people given access to that organization's books.

Disconnect on the Finance screen revokes our access with the provider and deletes the stored credentials. You can also revoke access from inside QuickBooks Online or Zoho Books.

6. AI features

Rose includes an assistant that answers questions about your work, helps with tasks, summarizes and triages mail, drafts replies, transcribes recorded meetings, and checks documents for inconsistencies. To do this, the relevant information is sent to AI model and transcription providers that process it on our behalf. We configure these services so that customer information is not used to train the providers' general models. AI output can be wrong; people review it before relying on it.

7. How we share information

• Within an organization: with the people in that organization who are allowed to see it, based on their role, their teams and any access they have been given.
• With our support team, only with permission: Rose staff are not members of your workspace. To see it in order to help you, we need a one-time support code from one of your Owners; that view is read-only, any change needs an Owner's approval, and every support session is recorded in your Audit Log. See the Trust Center.
• With service providers that host, deliver and support the platform, under contracts that limit their use of the information (see below).
• When required by law, or to protect the rights, safety and security of people and the platform.
• In a business transfer, such as a merger or sale of assets, subject to this policy.

8. Service providers

We use these providers to run Rose. Some are used only when an organization or person turns on the related feature.

The current list, with what each provider processes, is kept on our Data Protection page.

9. Cookies

Rose uses only the cookies it needs to work: keeping you signed in, keeping a support or view-as session to its time limit, your time zone and your display preferences. We do not use advertising or cross-site tracking cookies.

10. How long we keep information

• Account information: while the account is active, then as needed for records, security and legal obligations.
• An organization's content: for as long as the organization keeps its account.
• Connected calendars and mail: until you disconnect the account; disconnecting deletes the stored calendars, events and tokens for it.
• Meeting recordings: audio is deleted after 30 days; the transcript and action items after one year.
• Imported accounting records: until the organization deletes them or closes its account.
• Security and audit logs: as long as needed to protect the platform and investigate incidents. Audit entries cannot be edited or deleted.

When an organization closes its account and asks us to, we delete or de-identify its information, except what we must keep by law.

11. Security

We protect information with encryption in transit and at rest, separately encrypted storage for the tokens of connected accounts, separation between organizations enforced by the database itself, role-based access, multi-factor sign-in, and audit logs of sensitive actions. The Trust Center describes these in more detail. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you and the relevant organization as the law requires.

12. Your choices and rights

• Connections: connect or disconnect any calendar, mail or accounting account at any time, in Rose or from the provider's own settings (for Google, at myaccount.google.com/permissions).
• Notifications: turn them on or off in Settings.
• Access, correction and deletion: depending on where you live (for example California, Colorado, Connecticut, New Jersey, Texas, Virginia and other states with privacy laws), you may have the right to know what personal information is held about you, to get a copy, to correct it, to delete it, and to opt out of sale, targeted advertising and certain profiling. We don't sell personal information or use it for targeted advertising.

To make a request, email admin@paragonroofingsolutions.com. We will confirm your identity before acting and respond within 45 days. If your information came to us from an organization, we will work with that organization to answer. You may use an authorized agent, and you may appeal a decision by replying to our response. We won't treat you differently for using these rights.

13. Children

Rose is for businesses and is not directed to children. We do not knowingly collect information from children under 16.

14. Where information is processed

Rose is operated in the United States, and information is stored and processed in the United States.

15. Changes to this policy

We may update this policy. We will post the new version here with a new effective date and, for significant changes, tell users in Rose before the changes apply.

16. Contact us

Rose Tech HQ LLC · 4 Haddonfield Rd, Cherry Hill, NJ 08002 · admin@paragonroofingsolutions.com