Privacy Policy

This Privacy Policy explains how Rootwave Technologies, LLC ("Rootwave," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit rootwavetech.com or use a Rootwave-operated product or service that links to this policy.

If Rootwave processes information on behalf of a business customer under a signed agreement, order form, data processing agreement, or other written contract, that agreement controls to the extent it conflicts with this policy.

Depending on how you interact with Rootwave, we may collect contact and account information such as your name, business email address, phone number, organization, role, and authentication details; communications and support information; billing or transaction information when applicable; and information you choose to submit through our products and services.

Our services may also process business records, messages, documents, media, device or facility information, operational data, and other customer content that an authorized customer or user provides or connects to Rootwave.

We and our infrastructure providers may automatically receive technical information such as IP address, browser or device type, operating system, timestamps, requested pages, diagnostic events, and security or access logs when you use our websites or services.

We collect information directly from you, from the organization that gives you access to a Rootwave service, from devices or systems you choose to connect, from third-party services you authorize, and automatically from the operation and security of our websites and services.

We use information to provide, secure, maintain, troubleshoot, and improve Rootwave products and services; authenticate users and enforce permissions; operate customer-requested integrations and automations; communicate with users and customers; respond to support, sales, and security requests; prevent abuse and fraud; comply with law; and protect the rights, safety, and integrity of Rootwave, our customers, and others.

We may use aggregated or de-identified information for analytics, reliability, product development, and research where the information cannot reasonably be used to identify an individual.

When a business customer uses Rootwave to process information about its employees, customers, vendors, facilities, devices, or operations, the customer generally determines why and how that information is processed. Rootwave processes that customer data to provide the service and according to the customer's instructions and applicable agreement.

If your information appears inside a customer's Rootwave workspace and you want to exercise a right concerning that information, you may need to contact that customer directly. We will assist customers with valid requests as required by applicable law and our agreements.

Rootwave may let an authorized user connect third-party products or services. When you authorize an integration, Rootwave may receive, transmit, store, or otherwise process the information necessary to provide that integration on your behalf. The third party's own terms and privacy practices also apply to its service.

We do not ask end users to provide a third party's private application credentials when an authorized OAuth or similar delegated-access mechanism is available. Access to connected services is limited to the permissions granted through the applicable integration and may be revoked according to the connected provider's controls.

We may disclose information to service providers that help us host, secure, deliver, communicate, support, or operate our services; to third-party services you or your organization choose to connect; to professional advisers where reasonably necessary; in connection with a corporate transaction; or when required to comply with law, legal process, or a valid governmental request.

We may also disclose information when reasonably necessary to investigate fraud or abuse, enforce our agreements, protect security, or protect the rights, property, or safety of Rootwave, our customers, users, or others.

Rootwave does not sell personal information for monetary consideration. As of the effective date of this policy, Rootwave does not share personal information for cross-context behavioral advertising and the Rootwave public website does not use third-party behavioral advertising.

Our website and services may use essential storage, cookies, or similar technologies for security, authentication, preferences, or service operation. Because there is no universally accepted standard for browser Do Not Track signals, our services may not respond to Do Not Track. Where applicable law requires recognition of a legally valid opt-out preference signal, we will honor that requirement for processing subject to the signal.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of information, customer configuration, contractual requirements, and legal obligations.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. No system is perfectly secure, and we cannot guarantee absolute security. Customers and users are responsible for protecting their credentials and configuring their own access and integrations appropriately.

Depending on where you live and the context in which Rootwave processes your information, you may have rights to request access, correction, deletion, portability, restriction, or other information about our processing, and to opt out of certain uses or disclosures. Some rights apply only when legal thresholds or other statutory conditions are met.

To make a privacy request, email hello@rootwavetech.com with the subject line "Privacy Request." We may need to verify your identity or authority before completing a request. We will not discriminate against you for exercising a privacy right provided by applicable law.

Rootwave's websites and business services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through the public website. If you believe a child has provided us personal information improperly, contact us so we can review the issue.

Rootwave and our service providers may process information in the United States and other locations where we or they operate. Those locations may have data-protection laws different from the laws where you live. Where required, we use appropriate contractual or other safeguards for cross-border processing.

We may update this Privacy Policy as our services, practices, or legal obligations change. We will post the updated policy here and change the effective date. If a change materially affects how we use information already collected, we will provide additional notice when required by law or contract.

Questions or requests about this policy may be sent to Rootwave Technologies, LLC at hello@rootwavetech.com.