Last updated 2026

Privacy policy

ROSASIS AI is a self-hosted application: the operator of this installation is the data controller. This page describes what the software stores and to whom it sends data.

Template, not legal advice

This document is a starting template for an operator running this software. It describes what the application actually does, but it has not been reviewed by a lawyer and it does not establish compliance with GDPR, CCPA or any other regime. Have it reviewed before you rely on it.

What is stored

The application stores the minimum needed to run a support workspace:

Account data: name, email address, hashed password, locale and theme preference.
Workspace data: organization name, plan, members and roles.
Support data: emails you sync or import, contacts, tickets, notes, drafts and knowledge-base documents.
Operational data: audit log entries, usage counters, job records and session records.

Where it is stored

In the PostgreSQL database and the local storage directory configured for this installation (STORAGE_DIR). Nothing is sent to the authors of the software.

Third parties

Data leaves the installation only through integrations the operator configures: OpenAI (email text and knowledge excerpts you choose to process), Google or Microsoft (mailbox access), Stripe, PayPal or NOWPayments (billing data) and your SMTP provider (transactional email). Each call uses credentials you supply.

Retention

Each workspace has a configurable data-retention window (default 365 days). The retention job deletes records older than that window when the worker process runs. Deleting a workspace removes its rows through database cascades.

Your choices

You can export your workspace data from the security page, delete individual messages or documents, delete your account, or delete the whole workspace. Deletion is immediate and irreversible in this installation.

Contact