Data Processing Addendum
This DPA forms part of, and is incorporated into, the Roooster Terms of Service between Roooster and the Customer, and applies whenever Roooster processes personal data on the Customer's behalf. This published addendum is not evidence that a separate copy has been signed by the parties. To discuss a written agreement, email contact@roooster.ai with your legal entity name and signing contact.
1. Parties and roles
This Data Processing Addendum ("DPA") supplements the Roooster Terms of Service between BE BETTER NOW LLC, a Florida limited liability company doing business as Roooster ("Roooster" or "Processor"), and the Customer ("Controller") where Roooster processes personal data on the Customer's behalf. For end-customer data Customers enter into the platform (homeowners, tenants, contacts), the Customer is the Controller and Roooster is the Processor.
2. Scope and subject matter
Roooster processes personal data only as instructed by the Customer and only to provide the Roooster service: storing customer records, generating quotes, dispatching jobs, sending service-related communications, and enabling contractors to collect invoice payments from their own customers through Stripe Connect where that feature is used. Stripe does not process subscriptions purchased through Apple's iOS in-app purchase system.
3. Categories of data and data subjects
- Operators & staff: name, email, account credentials or identity-provider references, phone, role, login and audit metadata.
- End customers entered by operators: name, service address, phone, email, job history, photos uploaded for AI quoting, access notes.
- Payment metadata: where Stripe Connect is used, connected-account and invoice-payment identifiers and related transaction metadata. For iOS subscriptions, Apple handles purchase transactions; Roooster may receive subscription status and entitlement information through its configured subscription infrastructure. Verify exact fields and flows against the production configuration before publication.
4. Sub-processors
A current list of sub-processors is maintained at roooster.ai/legal/subprocessors. Roooster will use commercially reasonable efforts to update that page at least 30 days before adding a new sub-processor that processes personal data.
5. Security measures
The technical and organizational measures applicable to Customer data should be set out in the parties' executed agreement and verified against the production service. The public security page provides general information and does not replace those implementation-specific details.
6. Personal data breach notification
Roooster will notify the Customer of a personal data breach affecting Customer data without undue delay and within the period stated in any executed agreement or required by applicable law. The notice will include information reasonably available to Roooster to help the Customer meet its legal obligations.
7. International transfers
The locations and transfer safeguards applicable to a particular service depend on the providers and configuration actually used. Any applicable transfer mechanism must be confirmed in the relevant executed agreement or transfer documentation. This page does not represent that a particular set of Standard Contractual Clauses or UK transfer addenda has been executed.
8. Assistance with data-subject rights
Roooster assists Controllers in fulfilling access, rectification, and erasure requests. An authenticated account owner can initiate account deletion from the in-app deletion controls in supported app versions. If those controls are unavailable, the owner may contact contact@roooster.ai. Customer requests about records managed by an operator should be sent to that operator, who may ask Roooster for assistance at the same address. Roooster responds within the period required by applicable law.
9. Return or deletion of data
When an account is closed, access to the account ends. In supported app versions, an authenticated account owner can initiate deletion in-app; email contact@roooster.ai is the fallback. Deletion enters a 30-day recoverable tombstone period and permanent removal is targeted within 90 days after the request, subject to processing requirements. Roooster may retain only information required for legal, tax-record, security, or fraud-prevention purposes for the applicable period. This does not promise deletion of financial records that must be retained by law. See the Data Retention Policy for details.
10. Contact
Questions about this DPA, requests to discuss a written agreement, or data-protection inquiries: contact@roooster.ai.