Generation Growers · Rootstock

Your privacy

For the people who use Rootstock at the nursery. Last updated 22 October 2026.

What Rootstock keeps about you

Your name, your username if you have one, and your role (crew, lead, office).
Your PIN or password — stored scrambled, so nobody can read it, not even the office.
Your hire date and birthday, if the office adds them. The crew board shows only the month and day of a birthday.
Your schedule, the jobs you're on, and the time you log on jobs. Job time is for tracking the work — your real hours and pay are on the nursery's separate time clock, never in Rootstock.
Time off and call-outs you send. A sick call-out never asks for a reason.
Photos you take of plants and jobs, and what you ask Sage.
A usage log: each time you sign in, accept the licence notice or (for owners) download the records, Rootstock notes the time, how you signed in, the internet address and a short device label such as "Chrome on iPhone". Only the owners can see it.

You see your own schedule, jobs, time off and Sage chats.
Leads see the crew's jobs and schedules. The office and the owners see the people screens.
A note the office writes about you is seen by the office only.
Sage answers you from your own chats and notes — never from someone else's.

Plant photos you send to Sage: 30 days.
A reason you gave for time off, and the office's reply: one year, then cleared. The record that you were off stays.
Your Sage chats: six months, or sooner if you erase them (the link under Sage's chat) or you leave. Sage's memory notes about you: until you erase them or you leave.
Photos on jobs, notes and stock corrections: a year after the job is finished.
When you leave: your Sage chats are erased at once. A year later your birthday, the office's note, your PIN and your password are cleared. Your name stays on the work you did.
The usage log: a year, then deleted.
The nightly copy of photos and files on the nursery PC: each stays there for 30 days after the original is deleted, then it is removed.
Backups of the whole app roll off after 14 to 90 days.

If Sage can't tell what plant is in a photo, it may be checked by Pl@ntNet, a plant-ID service in France. Sage tells you when that happens. Keep people out of the shot.
When Sage searches the web, names, phone numbers and emails are taken out of the search first.
Rootstock runs on Google Cloud and Cloudflare; Sage runs on the nursery's own computer. Nothing is sold, and there is no advertising or tracking.

Ask the office if you want to see, correct or remove what Rootstock keeps about you.