1. Who is responsible
Rock Application Systems, LLC ("we", "us" or "our") operates RockDash. Contact us at contact@rockapps.com.br for privacy questions and requests.
We determine how account information, service administration, security and support information are processed. When an organization uses RockDash to manage information on behalf of its members, that organization may determine the purposes of processing workspace content, and we handle that content on its instructions under the applicable service agreement. If another organization independently hosts or administers your instance, ask that operator about its processing practices as well.
2. Information we handle
Account and profile information: your name, username, password hash and account timestamps, and an email address or profile image when you provide one or use a sign-in method that supplies it. Google sign-in can provide identity information needed to create or authenticate your account. We do not receive your Google password.
Workspace content: page names, links and their destinations, notes, checklists, card settings, uploaded images, themes, search preferences and page membership or permission settings. Content you add can include personal information about you or others.
Connected-service information: account identifiers, granted permissions, access and refresh tokens or API credentials, and information retrieved for the integrations you configure. Depending on the card, this can include messages, calendar events, tasks, files, repositories, deployments, monitoring results, support tickets, business metrics or billing summaries from a connected account.
Technical and support information: request and device information, error and performance diagnostics, security events, and the content of support communications. Where a paid service is purchased, the applicable purchase flow and payment provider may also process billing details and transaction information; do not send payment card details by email or place them in dashboard notes.
3. Why we use information
We use information to create and authenticate accounts, save and display your workspace, apply sharing permissions, retrieve the data requested by your cards, carry out supported actions you initiate, deliver account-related emails, answer support requests, operate purchases where applicable, and maintain the reliability and security of RockDash.
Where a legal basis is required, the relevant basis depends on the activity: providing a requested service or performing a contract, complying with legal obligations, protecting legitimate interests such as security and reliable operation where permitted, or obtaining consent when required. An OAuth authorization enables the selected integration; it does not authorize unrelated uses of your information.
4. Connected services and Google data
Integrations are optional. You can use links and notes without connecting every service. Review the provider’s authorization screen before connecting an account: it describes the permissions requested. Credentials are used by RockDash to communicate with that provider and are stored encrypted by the application.
For Google integrations, the configured permissions cover reading Calendar events, Gmail messages, YouTube information, Drive files and Sheets data. Gmail modification permissions support actions such as marking messages as read or moving them to trash when you initiate them. The integration does not request Gmail send or compose permissions. Google sign-in and connecting Google productivity cards serve different functions.
Google API data is used to deliver the connected features you choose. Our handling of that data is subject to the Google API Services User Data Policy and its Limited Use requirements. We do not sell Google API data, use it for advertising or lending decisions, or use it to train generalized AI models. Human access is restricted to the circumstances permitted by that policy, such as your affirmative agreement for specific support, necessary security investigation or a legal obligation. Transfers are limited to the policy’s permitted purposes.
Disconnecting an integration removes the connection credentials stored for it in RockDash. You can also revoke authorization directly with the provider. Disconnection does not erase independently stored workspace content, information already copied by other people, or records retained by the provider. Review shared pages before adding information retrieved from an integration.
7. Retention and deletion
We keep account and workspace information for as long as needed to provide the service and fulfill the purposes described here. Retention depends on the type of information, your account and organization’s instructions, security needs, unresolved disputes and applicable legal obligations; there is no single retention period for every category.
You can edit or remove content where the application grants you permission and disconnect connected accounts in integration settings. To request account closure, deletion of personal information or help with information you cannot remove yourself, email contact@rockapps.com.br. We may need to verify your identity and authority over the information.
Removal from an active account does not necessarily remove copies retained by other page members, connected providers or legally required records. If backup or recovery copies exist, their removal follows the applicable recovery lifecycle rather than an immediate purge of every copy. We will explain relevant limits when responding to your request.
8. Security and international processing
RockDash includes password hashing, encrypted storage of integration credentials, authenticated sessions and access controls for user and page data. These safeguards do not make the service immune to security incidents. Keep credentials confidential, limit integration permissions and report suspected misuse to contact@rockapps.com.br.
Our providers and the services you connect may process information in countries other than your own. When applicable law requires safeguards for an international transfer under our responsibility, we use the required arrangements. Contact us for information about processing relevant to your account; this policy does not promise a particular hosting country or data-residency commitment.
9. Your choices and rights
Depending on applicable law, including Brazil’s LGPD where it applies, you may request confirmation of processing, access, correction, deletion, portability, information about sharing, or restrictions on or objections to certain processing. You may withdraw consent where processing relies on it, without invalidating earlier lawful processing. These rights can be subject to legal conditions and exceptions.
Send requests to contact@rockapps.com.br with enough information to identify your account and explain the request. Do not send passwords, API keys or unnecessary identity documents. We may request proportionate verification and will respond within applicable legal deadlines. If your organization controls the relevant workspace information, we may refer or coordinate the request with it.
You may also raise a concern with the competent data protection authority, including Brazil’s ANPD where applicable. Contacting us does not prevent you from exercising that right.
10. Children’s information
RockDash is a productivity service and is not directed to children. Do not provide a child’s personal information or create an account where applicable law requires authorization that has not been obtained. If you believe a child’s information was collected inappropriately, contact us so we can investigate and address it.
11. Updates and contact
We may update this policy as the service or its processing practices change. The date above identifies this version. Material changes will be communicated as required by law, and additional consent will be requested when required before introducing a new use of information. This policy is provided in English across all website languages.
For privacy, security or account-data questions, contact Rock Application Systems, LLC at contact@rockapps.com.br.