Privacy Policy.
What data RocketDevs collects, why, how the optional productivity-monitoring tool works, and your rights.
1. Who we are and contact
RocketDevs, LLC is a Delaware limited liability company with its registered address at 8 The Green, Suite R, Dover, DE 19901, USA, operating from Cape Town, South Africa. Where section 2 says we act as controller, RocketDevs, LLC is the controller of your personal data.
For any privacy matter, including requests under the GDPR, CCPA/CPRA, or POPIA, contact James Hitch, COO, at support@mail.rocketdevs.com.
2. Our two roles: controller and processor
RocketDevs is the data controller for website visitors, leads, client relationships, and candidates who apply to join the RocketDevs network, including our vetting and assessment of those candidates. When we process personal data on a client's documented instructions, such as shortlisting Talent for that client or processing monitoring data on the client's behalf, we act as a data processor under that client's Data Processing Agreement. See our Data Processing Agreement page for the plain-language terms.
3. What we collect
We collect different data depending on who you are. The table below summarizes the main categories.
| Data subject | What we collect | Examples |
|---|---|---|
| Visitors and leads | Identification and contact details, usage data | Name, work email, company, pages viewed |
| Clients | Business contact and billing details, role and compensation preferences, engagement records | Billing contact, selected hourly tier, invoices |
| Candidates and Talent | Identification and contact details, CV and work history, education and skills, role and compensation preferences, interview notes and suitability assessments | CV, skills, assessment scores, interview notes |
We collect this data directly from you (forms, applications, and interviews), automatically through the site (cookies and similar technologies), and from service providers such as advertising and analytics partners. We do not collect sensitive personal information as defined by the CPRA; if that changes, we will provide a limit mechanism.
4. Developer productivity monitoring
RocketDevs provides clients an optional productivity-monitoring tool for engaged developers. Where a client chooses to use it, the tool captures screenshots roughly every 3 minutes on both monitors, along with keystrokes per minute and mouse movements per minute, logged to a dashboard during working hours, for work verification and billing accuracy.
RocketDevs does not monitor developers itself. The client chooses whether to use the tool and is the data controller for monitoring data; RocketDevs processes that data on the client's instructions.
Developers are informed before monitoring begins. Nothing runs covertly.
5. Why we process data and legal bases
The table maps each main purpose to its GDPR Article 6 basis and the closest POPIA equivalent.
| Purpose | GDPR Art. 6 basis | POPIA equivalent |
|---|---|---|
| Provide and operate the marketplace | Contract, Art. 6(1)(b) | Necessary to perform a contract |
| Match clients with Talent | Contract and legitimate interests, Art. 6(1)(b), (f) | Legitimate interest |
| Productivity monitoring (on client instructions) | Processed on the client-controller’s behalf; the client determines the basis | Processed on the responsible party’s behalf |
| Billing and fraud prevention | Legal obligation and legitimate interests, Art. 6(1)(c), (f) | Compliance with law |
| Marketing to leads | Consent or legitimate interests, Art. 6(1)(a), (f) | Consent |
| Vet, assess, and admit candidates to the Talent network | Steps at the candidate’s request prior to a contract, and legitimate interests, Art. 6(1)(b), (f) | Legitimate interest |
| Site analytics and advertising | Consent, Art. 6(1)(a) | Consent |
8. International transfers
Transfers from the EU and UK to the United States and South Africa rely on GDPR Chapter V safeguards: an adequacy decision where one applies, and otherwise the EU Standard Contractual Clauses (supplemented by the UK International Data Transfer Addendum for transfers subject to UK GDPR), together with a POPIA transfer schedule. We assess transfer risk and apply supplementary measures where needed.
9. Your rights
Your rights depend on where you live. Regardless of regime, you can reach us at support@mail.rocketdevs.com.
| Regime | Your rights | How to exercise |
|---|---|---|
| GDPR | Access, rectification, erasure, restriction, portability, objection, withdrawal of consent at any time, and complaint to a supervisory authority | Email us; we respond within one month |
| CCPA / CPRA | Know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination | Email us for know, delete, correct, and limit requests; we respond within 45 days. To opt out of sale or sharing, use the control in the footer; we honour Global Privacy Control signals |
| POPIA | Access, correction, deletion, objection, and complaint to the Information Regulator | Email us; we respond within a reasonable period |
Information Regulator (South Africa): complaints.IR@inforegulator.org.za, inforegulator.org.za. EU and UK residents can find their supervisory authority at edpb.europa.eu (UK: ico.org.uk).
10. Data retention
We keep personal data only as long as needed for the purpose collected, or as required by law.
Monitoring data is retained for up to 6 months and then deleted, in line with the monitoring vendor's storage configuration, unless the client, as controller, instructs earlier deletion or export.
As a guide: billing and invoice records are kept as long as tax and accounting law requires; client account data for the life of the relationship plus a limitation-period buffer; and candidate application data while your application is active and, if unsuccessful, for up to 24 months so we can reconsider you for future roles, unless you ask us to delete it sooner.
11. Automated decision-making
We use automated tools (including AI-assisted screening and ranking) to help assess candidates. Final vetting decisions are made by a human. If you believe an automated process affected your application, contact support@mail.rocketdevs.com and a human will review it.
12. Security, children, changes, and contact
We protect personal data with encryption in transit, access controls, and least-privilege practices. RocketDevs is not directed to children under 16, and we do not knowingly collect their data. We will post material changes to this policy with a revised date. For anything in this policy, contact support@mail.rocketdevs.com.