Legal
GDPR
Draft — pending attorney review
This page explains how the General Data Protection Regulation (GDPR) and the UK GDPR apply to what Rooted Reality processes.
Effective date: not set yet. This draft isn’t in effect; the date is set on the day the final version is published.
Who we are
Rooted Reality LLC, a Michigan limited liability company (“Rooted Reality”, “we”)PO Box 5001, Muskegon, MI 49445
hello@rootedreality.com
Coding agents
Rooted Reality for coding agents
These sections cover the recorder and the desktop app on Mac, where the private beta is forming now.
The record on your Mac
Draft — pending attorney review
Nothing from the record leaves your machine.
The desktop app reads the record where it is. We don’t upload it.
We don’t receive the record, so we can’t access, correct, export or delete it for you. You control it on your Mac; the privacy page says where it is and how to delete it.
Because the record never reaches us, we are not a controller or processor of it. You decide whether the recorder runs, and you can delete the record. If the record includes information about other people, such as changes they made to files while a chat was open, it stays on your Mac with the rest of the record, and you are responsible for it, as our terms say.
What we process, and why
Draft — pending attorney review
For the processing below, the controller is Rooted Reality LLC. You can reach us at hello@rootedreality.com.
Beta waitlist
- Data
- Your email address, the coding agents you use, your computer (Mac, Windows or both), whether you’re open to a call, and when you signed up
- Why
- To email you about the beta, about a call only if you asked for one, and about material changes to our legal pages
- Legal basis
- Consent (Article 6(1)(a)), which you can withdraw at any time
- Kept
- Until you ask us to remove it
Updates on laws and apps
- Data
- Your email address, the page you signed up on, the address of the page that linked you there (without its query string) if your browser passed it along, when you signed up, and when you unsubscribed
- Why
- To send the weekly digest and, until you unsubscribe, to tell you about material changes to our legal pages
- Legal basis
- Consent (Article 6(1)(a)), which you can withdraw at any time
- Kept
- Until you ask us to delete it. Using the unsubscribe link doesn’t delete it: your address stays, marked as unsubscribed, so it gets no more digests
Limiting repeat sign-ups
- Data
- A SHA-256 hash of your IP address, the name of the form or request, and the time
- Why
- To keep one network from flooding the sign-up forms and a few other parts of this site
- Legal basis
- Legitimate interests (Article 6(1)(f))
- Kept
- Deleted once more than two hours old, when a later request is allowed
Update checks
- Data
- Your IP address, the app’s version, your system and chip type, and the updater’s user agent, as part of the request
- Why
- To tell the desktop app whether a newer version exists
- Legal basis
- Legitimate interests (Article 6(1)(f))
- Kept
- Our own code keeps nothing from them. Our host, Vercel, keeps request logs for a limited period set by our Vercel plan. We don’t read those logs
Downloads
- Data
- Your IP address and your browser’s user agent, as part of the request to our download link and to GitHub, which serves the file
- Why
- To deliver the desktop app’s installer and its updates
- Legal basis
- Legitimate interests (Article 6(1)(f))
- Kept
- Our own code keeps nothing from them. Vercel keeps request logs for a limited period set by our Vercel plan. GitHub’s own policies set how long it keeps its logs
Website visits
- Data
- In hosting logs: your IP address, browser user agent and the page’s address. In analytics: the page’s address, the time and sometimes a referring site; for about one visit in five, page speed measurements, which element of the page was involved and your connection type
- Why
- To run the website and see which pages are used
- Legal basis
- Legitimate interests (Article 6(1)(f))
- Kept
- By Vercel, for a limited period set by our Vercel plan
Email you send us
- Data
- Your email address and whatever you write
- Why
- To answer you and act on your requests
- Legal basis
- Legitimate interests (Article 6(1)(f))
- Kept
- As long as we need it to answer you and keep track of what you asked. You can ask us to delete it
The phone ping (planned)
- Data
- None: it isn’t built yet, so nothing is processed for it
Your rights
Draft — pending attorney review
If you are in the EU or the UK, you can ask us to:
- Give you a copy of the personal data we hold about you (Article 15)
- Correct it (Article 16)
- Delete it (Article 17)
- Limit how we use it (Article 18)
- Give it to you in a machine-readable form (Article 20)
- Stop using it where we rely on legitimate interests (Article 21)
You can withdraw your consent to the waitlist or the update list at any time (Article 7(3)). Withdrawing doesn’t affect what we did before.
To ask, email hello@rootedreality.com from the address the request is about. The GDPR gives us one month to answer, which it lets us extend in some cases (Article 12(3)).
You can also complain to a supervisory authority, such as the one where you live or work (Article 77).
These rights cover what we hold. The record on your Mac isn’t something we hold; you can read, export or delete it there.
Service providers
Draft — pending attorney review
These providers process personal data for us.
Vercel
- What it does
- Hosts this website, with its request logs, Web Analytics and Speed Insights. It also receives the desktop app’s update checks and requests to our download links
- What it receives
- IP addresses, browser user agents, page addresses, referring sites and page speed measurements
GitHub
- What it does
- Stores the desktop app’s installer and its updates, and serves them when a download link on rootedreality.com sends you there
- What it receives
- The IP address and user agent of the browser that downloads a file
Neon
- What it does
- Hosts our Postgres database
- What it receives
- Waitlist and update-list sign-ups, and rate-limit entries
- Where
- United States (AWS us-east-1)
Resend
- What it does
- Delivers email from this website. Signing up for the waitlist doesn’t send an email
- What it receives
- The address it delivers to, and the message
Google Workspace
- What it does
- Our mailbox at hello@rootedreality.com
- What it receives
- Email you send us, including requests like these
International transfers
Draft — pending attorney review
Rooted Reality is based in the United States. Our database, which holds the waitlist, the update list and rate-limit entries, is in the AWS us-east-1 region in the United States, so what you give us there is transferred to the United States. Our other service providers, above, may also process your personal data outside the EU and the UK.
Automated decisions, and what you must give us
Draft — pending attorney review
- Automated decisions
- We make no decisions about you by automated means that have legal or similarly significant effects on you (Article 22). Limits on repeated requests, such as the sign-up limit above, only turn extra requests away for a while.
- Whether you must give us data
- Nothing requires you to join a list. On the waitlist form only your email address is required; the other questions are optional.
Changes to this page
Draft — pending attorney review
If we change this page, we’ll publish the new version on this page and change the effective date at the top of it. If a change is material, we’ll also email the people on our waitlist, and anyone on our update list who hasn’t unsubscribed, when we publish it.