Privacy Policy

1. Scope

This policy covers the rootblocks.com website. The RootBlocks product (console, daemon, control plane) will have its own privacy and data-processing terms when it becomes available.

2. What we collect

Early-access form: the email you provide and, optionally, your name, company, role, and message. We also record the submission time, the form topic, the page language, and the network address the request came from (for abuse prevention).

Booking (/agenda): the details you enter when scheduling (name, email, chosen time, optional notes), processed by our self-hosted Cal.com scheduling service.

Support chat: if you use the in-page chat, the conversation and any contact details you share in it, processed by our self-hosted Chatwoot service.

Technical logs: our web server keeps standard access logs (requested URL, timestamp, user agent, network address) for security and operations.

3. Analytics, without cookies

We use a self-hosted Umami instance for aggregate, cookieless analytics: page views, referrers, browser and country level data. It sets no cookies, stores no persistent identifiers, and does not follow you across sites. We see trends, not people.

4. What we do NOT do

No advertising trackers, no third-party ad cookies, no social pixels, no data brokers, and no sale or rental of personal data. Ever.

5. Why we process your data (legal bases)

To respond to your early-access request or booking (performance of pre-contractual steps you request); to run and secure the Site (legitimate interest); to send you the communications you asked for (consent, revocable any time).

6. Where it runs (processors and hosting)

The Site and its supporting services (scheduling, support chat, analytics) run self-hosted on infrastructure operated within our fleet, hosted on Hetzner servers in the European Union. Email notifications for form submissions are delivered via Postmark (ActiveCampaign, Inc.) as a processor.

7. Retention

Early-access leads are kept while the waitlist and launch program are active, then deleted or anonymized. Booking and chat records are kept as long as needed to handle the conversation and reasonable follow-up. Server logs rotate on a short operational schedule.

8. Sharing

We share personal data only with the processors named above, and if the law requires it. If RootBlocks LLC is ever part of a merger or acquisition, data may transfer as part of that transaction under equivalent protections.

9. International transfers

Site data is primarily stored in the European Union (Hetzner). Where data is processed in the United States (for example, email delivery via Postmark, or our own access as a US company), we rely on appropriate safeguards such as standard contractual clauses.

10. Your rights

Depending on where you live (including under the GDPR and the CCPA), you may have rights to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. Write to hello@rootblocks.com and we will act on your request; you also have the right to complain to your local data-protection authority.

11. Security

The Site is served over TLS with strict security headers. Form submissions are validated, rate limited, and stored on access-controlled infrastructure. No system is perfectly secure; if a breach affects your data we will notify you as required by law.

12. Children

The Site is a business service and is not directed at children under 16. We do not knowingly collect their data.

13. Changes

We may update this policy; the date above reflects the current version. Material changes will be posted on this page.

14. Contact

Privacy questions and requests: hello@rootblocks.com. Data controller: RootBlocks LLC.