Privacy.

Effective May 9, 2026. Last revised July 6, 2026.

1. What this policy covers.

This policy describes how RocSite, Inc. ("RocSite," "we," "us") handles information when you visit the rocsite.com website (the "Site"). It does not cover any RocSite product or service offered under separate written agreement, those are governed by their own data-processing terms negotiated with the customer.

2. What we do not collect.

• We do not operate user accounts on this Site.
• We do not run third-party tracking pixels, advertising tags, or session-replay tools on this Site.
• We do not knowingly collect protected health information (PHI) through this Site's own infrastructure. The ICH Triage demo is intended for synthetic or fully de-identified data only, see Section 3.

3. What we do collect.

• Standard server / edge logs. The Site is hosted on Cloudflare Pages. Cloudflare receives and may log request metadata (IP address, user agent, referrer, request path, timestamp) for traffic management, abuse prevention, and standard operational telemetry. Cloudflare's privacy practices apply to that processing.
• Contact and pilot-enquiry forms. This Site runs a small number of forms, the general contact form, the AI Governor pilot-enquiry form, and the ICH Triage partner access-request and feedback forms. When you submit one, we collect the fields you provide (typically name, email, organization or institution, role, and your message) and retain them for the purpose of responding to your inquiry and for ordinary business records.
• Email correspondence. If you email [email protected] or another RocSite address directly, we retain that correspondence for the purpose of responding and for ordinary business records.
• ICH Triage demo uploads. The interactive demo on the ICH Triage page lets a visitor upload their own DICOM file, in addition to the pre-loaded synthetic cases, for real-time inference. An uploaded file is transmitted to a RocSite demo/evaluation endpoint to run that inference. Do not upload files containing real patient information; use synthetic or fully de-identified data only.

4. How we use information.

We use the limited information described above to operate the Site, respond to inquiries, prevent abuse, and maintain ordinary business records. We do not sell or rent any information about Site visitors.

5. Cookies.

The Site does not set first-party tracking cookies. Cloudflare may set strictly necessary cookies for security and traffic management; those cookies are not used for advertising or cross-site tracking.

6. Third parties.

The Site links out to third-party services for verification purposes, Credly (for credential verification), medRxiv (for the published preprint), OSF (for the pre-registration), and GitHub (for the analysis code). When you click through to those services, their privacy policies apply.

7. Your rights.

If you have emailed us and want your correspondence deleted from our business records, write to [email protected] and we will honor reasonable requests subject to legal retention obligations. Residents of California, the EU/UK, and other jurisdictions with applicable privacy law may have additional rights; we will respond to verified requests in accordance with applicable law.

8. Children.

The Site is intended for adults. We do not knowingly collect information from children under 13 (or 16 in the EU/UK).

9. Changes.

If this policy changes, we will update the effective date at the top of this page.

10. Contact.

Privacy questions: [email protected].