Legal

Rostrix Subprocessors & Service Providers

Version 1.4 · Effective 11 October 2026 · Last updated 19 October 2026

This page lists service providers and key technologies Rostrix uses to operate the platform, and integrations a customer can turn on. Rostrix AI is OpenAI. Square and Xero are listed under customer-enabled integrations. Marketing click names stay in the browser. When a Meta Pixel ID is configured, public pages load Meta’s pixel for advertising measurement, as listed below. Provider details may change as Rostrix evolves. Rostrix will update this page when material changes are made to relevant service providers.

Service providers

Provider	Purpose	Notes	Region	Retention
Hostinger	Application hosting and related infrastructure	Hosts the Rostrix application environment used in production. PostgreSQL runs on the same machine (127.0.0.1).	The production server for rostrix.app is a Hostinger VPS. Its address geolocates to Singapore.	Application records on that server stay until the product or Rostrix deletes them. Read notifications are removed 90 days after they are marked read, and every notification is removed within 180 days of creation. The repository does not define a database backup job.
Cloudflare R2	Object / file storage	Stores uploaded files such as documents and images used by the product.	The storage client uses Cloudflare’s default R2 endpoint (S3 region “auto”), not a jurisdiction endpoint such as eu or us. Cloudflare does not guarantee a country for that default.	Objects stay until Rostrix deletes them. Clock-in and clock-out photos are deleted after 90 days. The repository sets no other lifecycle rule. Cloudflare expires incomplete multipart uploads after 7 days by default.
Resend	Transactional and service email delivery	Used to send invitations, notifications, receipts and support-related mail.	Resend stores account data, message content and delivery logs in the United States. The sending region is chosen on the domain in Resend and is not set in this repository.	Resend keeps email and log data for 30 days on Free, Pro and Scale plans, and deletes remaining customer data within 90 days after the account ends. The repository does not record an Enterprise retention setting.
Stripe	Payment and subscription processing	Processes paid plan checkout and billing. Card details are handled by Stripe.	Stripe’s data processing agreement says personal data is transferred to Stripe, LLC in the United States and may be processed by Stripe affiliates worldwide, including Stripe Payments Australia Pty Ltd.	Stripe says it generally keeps business-user personal data for five or more years after the relationship ends or the last transaction, whichever is later, and longer where the law requires it.
OpenAI	Rostrix AI. Processes chat prompts and the roster, staff and leave data needed to answer.	Chat calls the OpenAI Chat Completions API. The only model is gpt-6-luna. Prompts can also include time clock, tasks, labour figures and other operations records when the user’s role is allowed to see them. A voice report uses the caption from the browser. The recording is not sent to a separate transcription model. Rostrix stores the question, answer and source snippets in its own database. The code does not write a separate copy of the prompt.	Rostrix calls api.openai.com and does not set a data-residency parameter.	OpenAI’s platform documentation says API inputs and outputs are not used to train models unless the customer opts in. Abuse-monitoring logs for chat completions are kept for up to 30 days, and longer where the law requires it. Rostrix has not turned on zero data retention. Ask conversations stored in Rostrix have no deletion period.
Meta Platforms	Advertising measurement for Facebook and Instagram	Loaded only when a Meta Pixel ID is configured. The pixel runs on public marketing pages, the sign-in and registration pages, and business setup. It records a page view and, after a business workspace is created, one CompleteRegistration event from the browser. When a conversions access token is also configured, the server sends the same event with the same event id, plus IP address, browser type, and Meta’s click cookie when the browser already has one. That event does not include name, email, business name, or account id. A fresh visit to the signed-in application does not load the pixel.	Meta’s privacy policy says information can be transferred to, stored, and processed in the United States and other countries where Meta or its partners operate. This repository does not choose a Meta data region.	Meta keeps pixel data under its own advertising retention rules. Rostrix does not store a copy of the pixel event. The browser may keep Meta’s cookie until the visitor clears it or it expires.

Customer-enabled integrations

These providers receive customer data only after that business connects them. They are not used for every Rostrix workspace.

Integration	Purpose	Notes	Region	Retention
Square	Point-of-sale sales used for net sales and labour percentage	A business connects Square from Settings and maps Square locations to Rostrix branches. Rostrix does not connect Square unless that business turns it on.	Square’s privacy notice says personal information is primarily processed and stored in the United States, and may also be handled in other countries where Square operates, including Australia. Rostrix calls connect.squareup.com and does not set a storage region.	Disconnecting stops Rostrix sending further sales data. Data already in the Square account stays with Square. Square may keep transaction and account records after that where the law or its compliance obligations require it.
Xero	Payroll export of employees, leave balances and timesheets	A business connects Xero Payroll (Australia) per branch. Rostrix sends employee, leave and timesheet data only for a connected branch.	Rostrix calls the Xero Payroll Australia API only. Xero says customer data may be processed in Australia, New Zealand and the United States, and that it hosts its services on AWS with servers in the United States.	Disconnecting stops further sends. Data already in the customer’s Xero organisation stays there. Xero’s data processing terms keep personal data for the agreement and for up to 7 years after it ends.

Technologies used inside Rostrix

These are frameworks/technologies used to build Rostrix. They are listed separately from third-party service providers.

Technology	Purpose	Notes	Region	Retention
PostgreSQL	Primary application database	Database technology running within Rostrix infrastructure. Listed here for transparency; not a separate customer-facing subprocessors vendor by itself.	Same server as the Rostrix application: the Hostinger VPS that geolocates to Singapore.	Same as the application server. No database backup job is defined in the repository. Read notifications are removed after 90 days, and all notifications within 180 days of creation.
NextAuth	Authentication framework	Open-source authentication framework used inside the Rostrix application. Not a separate hosted identity vendor in the current architecture.	Runs inside the Rostrix application. No separate vendor region.	Session handling follows the Rostrix application. No separate vendor retention.

Security contact: security@rostrix.app

Related: Privacy · Security · Customer Data