Privacy notice

What we collect, where it goes, and who can see it.

Effective August 21, 2026. This notice covers rosehq.ai and the Rose trial operated by NEUL Capital Holdings, LLC ("NEUL", "we").

Short version: your company's data is held for your company alone. We don't sell it, we don't train shared models on it, and the AI provider we use is contractually barred from training on it. You can get a copy or have it deleted by asking.

What we collect

Request form	Name, work email, company, role, the systems you say you run, and your message. Plus the IP address the request came from, to stop abuse.
Your account	Login name, display name, email, a hashed password (we never see the password itself), and sign-in times.
What you give Rose	Onboarding interview answers, questions you ask and her answers, files you upload, corrections you make, and — only if you connect it — read-only financial statements and account lists from QuickBooks via Intuit's authorization flow. We store Intuit's access tokens encrypted and never your Intuit password.
How she's used	Per-company counts of questions, connections, and memories, the model that answered, response time, and cost. Used to operate the service and enforce trial limits.
Website	The public site sets no tracking cookies. The "mini Rose" chat on the public site sends only the text you type; it has no access to any customer data.

Where it lives

Rose and her databases run on servers NEUL controls, hosted in the United States (Hetzner, Ashburn, Virginia). Data is encrypted in transit. Database backups are encrypted and retained on a rolling basis.
Each company's data is separated by company identifier at the database level. Rose's retrieval, memory, and financial tools are scoped to the signed-in company on every request. Staff access is logged in a tamper-evident audit chain.
The public website is served by Vercel.

Who else touches it

Anthropic	The AI models behind Rose. Your questions and the context Rose assembles (which can include your financial data) are sent to Anthropic's API to generate answers. Under NEUL's agreement, Anthropic does not train on this content. Some Rose capabilities run on models hosted on NEUL's own hardware instead and never leave it.
Intuit	Only if you connect QuickBooks. You authorize read-only access on Intuit's own site; you can revoke it from Rose's Sources tab or from your Intuit account.
Resend	Delivers our email (invites, reminders). Sees the recipient address and the message.
Nobody else	We do not sell or rent personal information, and we do not share company data with advertisers or data brokers. We disclose data only if legally compelled, and we will tell you if we are allowed to.

How long we keep it

During the trial and, if you become a client, for as long as your agreement runs.
Thirty days after a trial ends without conversion, your company's data is deleted. Ask sooner and we delete sooner — within 30 days of the request.
Request-form leads that are declined are deleted within 90 days.
Audit logs and billing records are retained as the law requires.

Your choices

Access and export. Ask and we send a copy of your company's data.
Deletion. Ask and it's gone — memory, conversations, files, connections, accounts.
Disconnect. QuickBooks can be disconnected by you at any time; Rose stops syncing immediately.
Correction. Fix anything about your account or what Rose believes, directly in the workspace.

Requests go to adamm@neulcapitalholdings.com. Residents of states with privacy laws that grant additional rights (for example Colorado, California, Virginia) can exercise them the same way; we don't discriminate for doing so.

Automated decisions

Rose generates analysis; she does not make decisions about people. Nothing she produces is used to decide an individual's eligibility for credit, employment, housing, insurance, or similar. Her output is reviewed by the humans at your company who asked for it.

Children

Rose is for businesses. We don't knowingly collect information from anyone under 18.

Changes

When this notice changes materially, we email account holders and update the date at the top.