Effective Date: April 2026
Data Controller: Fidelis Farm & Technologies, LLC (DBA Fidelis Machines)
Contact: [email protected]
Fidelis Farm & Technologies, LLC (DBA Fidelis Machines) ("we", "us", "our") operates the Rockfish NDR software and the Rockfish Portal portal (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
Account Information:
- Name
- Email address
- Company name (optional)
Payment Information:
- Payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers, CVVs, or bank account details on our systems. We receive only a transaction confirmation and customer reference ID from Stripe.
License Information:
- License tier purchased
- License issuance and expiration dates
- License file download history
Usage Data (Portal):
- IP address and browser user-agent when accessing the Commerce portal
- Login timestamps
- Pages visited on the Portal
Software Telemetry:
The Rockfish NDR software does not collect or transmit any telemetry, analytics, or usage data to Fidelis Farm & Technologies, LLC (DBA Fidelis Machines). The software operates entirely offline after license activation.
The Rockfish NDR software processes network traffic **locally on your infrastructure**. We never collect, transmit, or have access to:
- Network packet contents or metadata from your monitored networks
- IP addresses, hostnames, or MAC addresses observed by your sensors
- IDS/IPS alert details, signatures, or detection results
- DNS queries, TLS certificates, or HTTP headers from your traffic
- Any data stored in your local Parquet files or DuckDB databases
We use the information we collect to:
- Create and manage your account
- Process license purchases and issue license files
- Send transactional emails (verification, login links, license expiry reminders)
- Provide customer support
- Comply with legal obligations
We do not sell, rent, or trade your personal information. We share data only with:
- **Stripe, Inc.** — for payment processing (subject to Stripe's Privacy Policy)
- **Email service providers** — for sending transactional emails (verification, login, reminders)
- **Law enforcement** — only when required by valid legal process
- **Account data:** Retained for the duration of your account. You may request deletion at any time.
- **License records:** Retained for 3 years after expiration for audit and support purposes.
- **Login/access logs:** Retained for 90 days.
- **Payment records:** Retained as required by tax and financial regulations (typically 7 years).
We protect your information using:
- TLS encryption for all data in transit
- Ed25519 cryptographic signatures on license files
- Encrypted database storage
- Access controls limiting employee access to production systems
- Regular security reviews of our infrastructure
You have the right to:
- **Access:** Request a copy of the personal data we hold about you.
- **Correction:** Request correction of inaccurate data.
- **Deletion:** Request deletion of your account and associated data.
- **Portability:** Request your data in a machine-readable format.
- **Objection:** Object to processing of your data for specific purposes.
To exercise any of these rights, contact [email protected].
The Commerce portal uses a single session cookie ("rockfish_session") for authentication. This cookie:
- Contains only a session identifier
- Is HTTP-only and secure
- Expires after 7 days of inactivity
- Is not used for tracking or advertising
We do not use analytics cookies, advertising cookies, or third-party tracking.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
Your data is processed and stored in the United States. By using the Service, you consent to the transfer of your information to the United States.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Commerce portal. Continued use of the Service after changes constitutes acceptance of the updated policy.
For privacy-related inquiries:
Email: [email protected]
Web: https://rockfishndr.com