Last updated: June 7, 2026
1.1 The controller of your personal data is ProRocketeers s.r.o., Company ID: 07279531, with its registered office at Bohumínská 410/135, Ostrava-Muglinov, 712 00, Czech Republic, registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, Insert 75209 (the "controller", "we").
1.2 We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the processing of personal data.
1.3 This policy applies to the Rock8Cloud platform and the website at https://rock8.cloud (together the "Service").
2.1 Account data. When you sign in with GitHub we receive your GitHub username, display name, email address and avatar. We process this data to create and operate your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
2.2 Billing data. When you subscribe to a paid plan, payments are processed by Stripe. We receive your subscription status, invoicing details and partial payment information (such as card brand and last four digits). We do not store full card numbers. Legal basis: performance of a contract and compliance with accounting and tax obligations (Art. 6(1)(b) and (c) GDPR). Invoicing data is retained for the periods required by Czech accounting and tax law (up to 10 years).
2.3 Technical and log data. When you use the Service we process IP addresses, request logs, build and deployment logs and similar technical records. We use them to provide the Service, secure it, prevent abuse and diagnose issues. Legal basis: performance of a contract and our legitimate interest in the security and reliability of the Service (Art. 6(1)(b) and (f) GDPR). Logs are retained for a limited period appropriate to their purpose.
2.4 Product analytics. With your consent we collect usage analytics through PostHog (pages visited, features used, device and browser type) to understand how the Service is used and improve it. Legal basis: consent (Art. 6(1)(a) GDPR). You can give or withdraw consent at any time via the cookie preferences on our website.
2.5 Communication. If you contact us, we process the content of the communication and your contact details to handle your request. Legal basis: performance of a contract or our legitimate interest in responding to inquiries (Art. 6(1)(b) and (f) GDPR).
2.6 Service emails. We may send you transactional emails related to your account, billing or the operation of the Service. These are not marketing messages. Commercial communications are sent only with your consent or under the conditions of Act No. 480/2004 Coll., and you can opt out at any time.
3.1 For personal data contained in the applications, databases and content you deploy through the Service, you are the controller and we act as a processor on your behalf. We process such data only to the extent necessary to host and operate your workloads.
3.2 Your workloads are hosted in data centers located in the European Union, operated by an ISO/IEC 27001 certified infrastructure provider acting as our sub-processor.
4.1 We share personal data only with service providers we need to operate the Service:
4.1.1 our cloud infrastructure provider (EU) - hosting in EU data centers, ISO/IEC 27001 certified;
4.1.2 Stripe - payment processing and invoicing;
4.1.3 GitHub - authentication and access to repositories you connect;
4.1.4 PostHog - product analytics (only with your consent).
4.2 We may also disclose personal data to public authorities where required by law.
5.1 Your workloads and the data they contain are hosted in the European Union. Some of our providers (Stripe, GitHub, PostHog) may process limited personal data in the United States. Such transfers are safeguarded by the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6.1 We keep personal data only as long as necessary for the purposes described above: account data for the duration of your account, billing records for statutory retention periods (up to 10 years), technical logs for a limited operational period, and analytics data for the period stated in our cookie settings. After your account is deleted, we erase or anonymize your personal data unless we are legally required to keep it, or need it to establish, exercise or defend legal claims.
7.1 We use strictly necessary cookies to operate the Service (session and authentication cookies, your cookie consent choice). These do not require consent.
7.2 Analytics cookies (PostHog) are set only after you accept them in the cookie banner. Your choice is stored in a consent cookie for one year. You can change your choice at any time via the "Cookie preferences" link in the footer.
7.3 You can also manage or delete cookies in your browser settings. Blocking necessary cookies may break parts of the Service.
8.1 Under the GDPR you have the right to:
8.1.1 access your personal data and obtain a copy (Art. 15 GDPR);
8.1.2 rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR);
8.1.3 erasure where data is no longer needed or processed unlawfully (Art. 17 GDPR);
8.1.4 restriction of processing (Art. 18 GDPR);
8.1.5 data portability - receive data you provided in a structured, commonly used, machine-readable format (Art. 20 GDPR);
8.1.6 object to processing based on legitimate interest (Art. 21 GDPR);
8.1.7 withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
8.1.8 lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Czech Office for Personal Data Protection), uoou.gov.cz.
8.2 To exercise any of these rights, contact us at support@rock8.cloud. We will respond without undue delay, at the latest within one month.
9.1 Questions about this policy or our data processing: support@rock8.cloud
