Privacy Policy

1. Information We Collect

Information you provide

When you create an account, purchase a product, or contact support, we collect:

• Name and email address
• Billing information (processed securely by Stripe — we never store card numbers)
• Support messages and attachments you send us
• Profile preferences you configure within our products

Information collected automatically

Our products collect minimal telemetry to help us fix bugs and improve performance: crash reports, feature usage counts, and performance metrics. This data is anonymized and cannot be linked back to you.

2. How We Use Your Information

We use your information to:

• Deliver and maintain our products and services
• Process transactions and send purchase receipts
• Respond to support requests and questions
• Send important product updates and security notices (opt-out available)
• Detect and prevent fraud or abuse
• Improve our products using anonymized, aggregated analytics

We do not use your data for advertising, and we do not build behavioral profiles.

3. Sharing & Disclosure

We never sell your personal data. We share it only in these limited circumstances:

• Service providers: Stripe (payments), Amazon Web Services (hosting), and Postmark (transactional email). Each is bound by data processing agreements.
• Legal requirements: If required by law or to protect the rights and safety of our users or the public.
• Business transfer: In the event of a merger or acquisition, your data protections travel with you and the acquirer must honor this policy.

4. Data Retention

We retain your account data for as long as your account is active. When you close your account we delete your personal data within 30 days, except where we're required to keep it for legal or tax purposes (typically 7 years for billing records).

5. Security

All data in transit is encrypted with TLS 1.3. Data at rest is encrypted with AES-256. We conduct annual third-party security audits and maintain a responsible disclosure program. Despite our best efforts, no system is 100% secure — please use a strong, unique password and enable two-factor authentication.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing
• Opt out of marketing emails (unsubscribe link in every email)

To exercise any of these rights, email us at privacy@rockyriversoftware.com and we'll respond within 30 days.

7. Cookies

Our website uses only essential cookies (session management and security). We do not use tracking or advertising cookies. Our desktop applications do not use cookies.

8. Children's Privacy

Our products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently done so, please contact us immediately.

9. Contact Us

Questions about this policy? Contact our Privacy Officer: