Privacy Policy
Last updated: 11 September 2026. Operated by BrownHawke Engineering.
Who we are
BrownHawke Engineering (“we”) operates the ROSE home software service (assistant, energy, and security features as configured for your household). Contact: support@brownhawke.engineering.
What we collect
- Account email and password hash for the homeowner portal and integrator dashboard.
- Household API keys, Admin PIN hashes, and optional Octopus API keys (encrypted at rest).
- Home Assistant connection details you or your installer provide (URL + long-lived token, encrypted).
- Conversation messages and long-term memories Rose stores.
- Energy plan settings and related operational events for your household.
- Billing metadata via Stripe (we do not store full card numbers).
Why we process it
To provide the service, secure high-risk actions, operate household energy features you enable, bill subscriptions, and improve reliability. Legal bases typically include contract (providing the service you signed up for) and legitimate interests (security, abuse prevention).
Processors
Cloudflare (Worker, D1, Vectorize, Tunnels), OpenAI (chat/embeddings when configured), Stripe (payments), Resend (transactional email when configured), Octopus Energy API (when you link an account), Met Office / postcodes.io (weather and region), optional Brave Search.
Retention
Portal account data while your billing account is active. Memories, conversations, and messages until you delete them or close the portal account. After portal account deletion we remove login credentials, Octopus keys, memories, conversations, and messages. Your installer may retain the household technical record (Home Assistant connection details, energy entity configuration, tunnels) until they archive the household. Energy plans/events may be retained for operational history. Stripe retains payment records under their policy.
Your rights (UK GDPR)
You can request access, correction, export, or deletion via the portal Privacy tools or by emailing support@brownhawke.engineering. Installers must not use customer Octopus keys or conversation content except as needed to support the install.
Contact
Data requests: portal Privacy tools when logged in, or support@brownhawke.engineering.