Rootline, Inc. ("Rootline", "we", "us") takes privacy seriously. This policy describes what information we collect when you use Rootline, how we use it, and the choices you have. If you have questions, email us at hi@rootline.io.
Account information: When you sign up we collect your name, email address, company name, and role.
Infrastructure signal data: Rootline ingests telemetry from your connected integrations — including metrics, logs, traces, deployment events, and topology data — to perform root cause analysis. This data is processed and stored in accordance with the terms you agree to.
Usage data: We collect data about how you interact with the Rootline application, including features used, investigations viewed, and integrations connected.
Communications: If you contact us by email or through the product, we retain those communications to respond and improve our support.
We do not sell your data or use it to train third-party AI models without your explicit consent.
We retain account data for the duration of your subscription and up to 90 days after deletion. Infrastructure signal data is retained per your plan (30 days on Starter, 12 months on Team, configurable on Enterprise). You can request full deletion at any time.
Rootline is SOC 2 Type II certified. We use encryption at rest and in transit (TLS 1.2+), role-based access control, and regular third-party penetration testing. See our Security page for full details.
Depending on your location, you have rights including: access, rectification, deletion, portability, restriction of processing, and objection. To exercise any right, email hi@rootline.io. We will respond within 30 days.
We use essential cookies to operate the application (session management, authentication). We use analytics cookies to understand how the product is used. You can disable analytics cookies in your browser settings. We do not use advertising cookies.
Rootline is GDPR compliant. Our lawful basis for processing is contract performance and legitimate interests. Data is stored in the EU and US. International transfers use Standard Contractual Clauses. Enterprise customers can request a DPA.
We will notify you of material changes by email or in-product notice at least 14 days before they take effect. Your continued use after that date constitutes acceptance.
Email our privacy team at hi@rootline.io — or write to Rootline, Inc., 548 Market St, San Francisco, CA 94104.