Privacy Policy

1. Introduction

Rosvelt LLC (“Rosvelt,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered software development platform and visit our website at rosvelt.com.

2. Information We Collect

2.1 Account Information

When you create an account or book a demo, we collect your name, email address, company name, job title, and other information you voluntarily provide.

2.2 Code and Project Data

To provide our Service, Rosvelt agents access your source code repositories and integrated development tools (such as GitHub, GitLab, Linear, Jira, Notion, Slack, and Figma) with the permissions you explicitly grant. We access this data solely to execute tasks assigned to our agents.

2.3 Usage Data

We automatically collect information about how you interact with our website and Service, including IP address, browser type, device information, pages visited, and referral source. We use PostHog for product analytics.

2.4 Scheduling Data

When you book a demo through our scheduling tool (Cal.com), we collect the information you provide during the booking process, including your name, email, and any notes you include.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Execute development tasks through our autonomous agents.
• Process your demo requests and communicate with you.
• Improve and optimize our platform and user experience.
• Analyze usage patterns to enhance the Service.
• Send you service-related communications.
• Comply with legal obligations.

4. Code and Data Confidentiality

We treat your source code and project data as confidential. Specifically:

• Your code is never used to train our AI models.
• Your code is never shared with other customers or third parties.
• Agent access to your repositories is limited to the permissions you grant.
• All code generated by agents is delivered exclusively to your repositories through your standard PR workflow.

5. Third-Party Services

We integrate with third-party services to provide the Service. These integrations are initiated and authorized by you. The third-party services we may connect to include:

• Source control: GitHub, GitLab
• Project management: Linear, Jira, Notion
• Communication: Slack
• Design: Figma
• Deployment: Vercel, AWS
• Analytics: PostHog
• Scheduling: Cal.com

Each third-party service has its own privacy policy. We encourage you to review their policies.

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Upon termination of your account, you may request deletion of your data. We will delete or anonymize your information within 30 days of a verified request, unless we are required by law to retain it.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Cookies and Tracking

We use cookies and similar tracking technologies to analyze website traffic and improve your experience. We use PostHog for product analytics to understand how users interact with our website and Service. You can control cookie preferences through your browser settings.

9. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You may opt out of the sale or sharing of your personal information. Rosvelt does not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a request, contact us at privacy@rosvelt.com. We will verify your identity before processing any request.

10. Your Rights Under GDPR (EEA/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) provides you with the following rights:

• Lawful Basis: We process your data based on contractual necessity (to provide the Service), legitimate interest (to improve and secure the Service), and consent (for analytics and marketing communications).
• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate personal data.
• Right to Erasure: You may request deletion of your personal data.
• Right to Restrict Processing: You may request that we limit how we use your data.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@rosvelt.com. You also have the right to lodge a complaint with your local data protection authority.

11. International Data Transfers

Rosvelt is based in the United States. Your information may be transferred to and processed in the United States or other countries where our service providers operate. When we transfer data outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data is protected in accordance with applicable data protection laws.

12. Do Not Sell or Share

Rosvelt does not sell, rent, or share your personal information with third parties for their direct marketing purposes. We do not participate in data broking or advertising networks. Any data sharing with third-party services is solely to provide the Service and is subject to appropriate data processing agreements.

13. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 13 (or 16 in the EEA). If you believe we have collected information from a child, please contact us immediately and we will take steps to delete such information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. For significant changes, we will also notify you via email or through the Service. Continued use of the Service after changes constitutes acceptance of the revised policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@rosvelt.com.

Rosvelt LLC
rosvelt.com