Effective Date: October 2026 Last Updated: October 2026
1. Introduction
Rocket & Main is a customer relationship management (CRM) and business management software platform developed and provided by Main Street Siteworks, a trade name of Prairie Sky Outdoor Hospitality Advisors, LLC.
This Privacy Policy describes how we collect, use, store, share, retain, and protect information in connection with Rocket & Main (the "Platform"), including optional integrations with Google Gmail and Microsoft 365.
We recognize that businesses rely on Rocket & Main to manage information about their customers, projects, and operations. Our goal is to handle that information responsibly, securely, and transparently.
This policy applies to the Rocket & Main Platform. Other Main Street Siteworks services and websites may have separate privacy policies.
2. Information We Collect
Account and User Information
We may collect and maintain names, email addresses, business contact information, account identifiers, user roles, permissions, authentication records, and account activity necessary to operate the Platform.
Business and Customer Information
Authorized users may enter and manage information such as:
- Customer and prospect names, contact information, and business addresses
- Business accounts and contacts
- Sales opportunities, projects, activities, notes, and follow-ups
- Estimates, proposals, invoices, receipts, change orders, and payment records
- Business documents and related communications
Businesses using the Platform determine what customer information they enter and are responsible for having the appropriate authority to collect and use that information.
Technical and Operational Information
We and our infrastructure providers may process technical information necessary for the Platform's operation, security, troubleshooting, and improvement. Depending on the service and its configuration, this may include application errors, authentication activity, usage events, timestamps, IP addresses, browser information, and system logs.
3. How We Use Information
We use information to provide and maintain Rocket & Main, authenticate users, manage permissions, support customer and project workflows, generate and deliver documents, facilitate authorized communications, respond to support requests, and maintain the security and reliability of the Platform.
We may use appropriate technical diagnostics and usage analysis to understand software performance, identify problems, improve features, and support customers.
We do not use customer business information for advertising or sell personal information to advertising companies or data brokers.
Information obtained from Google APIs is subject to the additional restrictions described in Sections 4 and 5.
4. Google Account and Gmail Integration
Rocket & Main provides an optional integration allowing an authorized business administrator to connect a Google account for sending business email through Gmail.
Google Information Accessed
The integration requests the following permissions:
- openid, email, and profile to identify the connected Google account and obtain available basic identity information, including its email address and display name.
- https://www.googleapis.com/auth/gmail.send to send email on behalf of the authorized Google account.
Rocket & Main does not request permission to read an existing Gmail inbox, search mailbox history, retrieve received messages, or delete emails.
How Gmail Access Is Used
When an authorized user sends an eligible business document through the Platform, Rocket & Main prepares and submits the email through Google's Gmail API.
This may involve processing recipient addresses, email subjects, message content, attachments, and secure links to business documents.
The integration is intended for communications initiated through authorized Platform functionality, not unsolicited advertising or independent access to a user's mailbox.
Authorization and Storage
Rocket & Main uses Google's OAuth authorization process.
The Platform receives authorization credentials, including access tokens and refresh tokens when granted. These credentials are encrypted before database storage and handled through server-side application functions.
The Platform also stores information needed to manage the connection, such as the connected email address, available display name, authorization status, and granted permissions.
Email Delivery Records
Rocket & Main may retain business-document delivery records, including recipient addresses, message subjects, sending timestamps, delivery or submission status, and identifiers returned by the email provider.
These records support document history, customer-service needs, and troubleshooting.
Disconnecting Google
An authorized administrator can disconnect a connected mailbox through Rocket & Main's business-unit settings.
Disconnecting clears the stored access and refresh tokens associated with the active connection, preventing the Platform from continuing to use those credentials.
The Platform's disconnect process does not itself guarantee revocation of the application's authorization at Google. Users can separately review and revoke connected application access through their Google Account settings.
Disconnecting does not automatically delete previously created business documents, customer records, or delivery history.
5. Google API Services User Data Policy and Limited Use
Rocket & Main's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is used only for permitted purposes, including providing and improving the user-facing features for which authorization was granted.
We do not use Google API user data for advertising, targeted marketing, creditworthiness assessments, or developing unrelated products. We do not sell Google API user data or provide it to data brokers or advertising platforms.
We limit transfers of Google API user data to circumstances permitted by Google's policies, including delivering authorized functionality with appropriate user consent, maintaining security, or complying with applicable law.
We do not permit human access to Google API user data except in circumstances allowed by Google's policies, including specific affirmative user consent, necessary security investigations, legal compliance, or permitted aggregated use for internal operations.
These limitations apply to information received through Google APIs, including applicable derived or aggregated information.
Technical diagnostics and general Platform usage analysis do not authorize unrelated use of Google API user data.
6. Service Providers and Information Sharing
Rocket & Main uses third-party technology providers to operate and support the Platform.
The current implementation uses services including:
- Supabase: Database services, authentication, and document storage.
- Netlify: Application hosting and supporting infrastructure.
- Google: Gmail authorization and email delivery when connected.
- Microsoft: Microsoft 365 email authorization and delivery when connected.
Specific hosting arrangements may vary as the Platform develops or as individual customer deployments are configured.
Service providers may process information as necessary to deliver their respective services. We seek to limit such processing to legitimate operational and service-related purposes.
We may disclose information when legally required, to protect the Platform and its users, or as otherwise permitted under applicable law and agreements.
Google API user data remains subject to the more restrictive rules described in Section 5.
7. Data Security
We maintain technical and operational safeguards intended to protect information processed through Rocket & Main.
The current implementation includes authenticated account access, user permissions, server-side handling of sensitive credentials, encrypted connected-mailbox authorization tokens, and database access controls.
Access to business information is governed by the Platform's permissions and applicable account configuration.
No electronic storage or internet-based system is completely immune to security risks. We cannot guarantee absolute security, but we work to maintain reasonable safeguards and respond to identified issues.
8. Data Retention, Account Closure, and Deletion
We retain information as reasonably necessary to provide the Platform, support customer operations, maintain business records, fulfill contractual and legal obligations, and address legitimate security or operational needs.
When a customer ends its Rocket & Main service or requests account-data deletion, Main Street Siteworks will review the request individually.
Where appropriate and technically feasible, we may arrange for an export of business information before deletion.
Eligible information will be removed through a verified process, subject to applicable legal, contractual, recordkeeping, and technical requirements.
Some information may need to be retained for legitimate purposes, including applicable financial recordkeeping obligations, dispute resolution, security investigations, or legal compliance.
Information removed from active systems may remain temporarily in routine service-provider backups until those backups expire under applicable retention schedules.
We do not currently promise an automatic account-deletion process or a universal deletion deadline.
Requests for account closure, data export, or deletion may be submitted to info.msw@mainstreetsiteworks.com.
9. Operational Monitoring and Software Improvement
Rocket & Main may collect or analyze appropriate operational information to maintain security, troubleshoot errors, evaluate performance, support customers, and improve the Platform.
This may include technical error records, system activity, and information about the use and reliability of Platform features, depending on the monitoring tools enabled.
Operational information is not collected or used for advertising purposes.
Any future monitoring practices that materially change the handling of personal information or Google API user data will be subject to appropriate disclosure and any required consent.
10. Business Customer Responsibilities
Businesses using Rocket & Main generally determine the purposes for which they collect and manage their own customer, employee, contractor, or prospect information.
Main Street Siteworks provides the software and processes that information as necessary to operate and support the Platform, subject to applicable agreements and legal requirements.
Business customers are responsible for providing any legally required privacy notices and obtaining appropriate permissions for the information they collect, enter, or process.
Requests concerning information controlled by a business customer may need to be directed to that business.
11. Third-Party Services
Optional integrations, including Google Gmail and Microsoft 365, are subject to the applicable provider's own privacy policies and terms.
Users should review those policies when authorizing connected services.
Rocket & Main's access is limited by the permissions granted and the capabilities implemented in the Platform.
12. Children's Privacy
Rocket & Main is intended for business use and is not designed or marketed for children under 13.
We do not knowingly solicit personal information directly from children under 13 through Platform account registration.
If we become aware of information collected in violation of applicable children's privacy requirements, we will take appropriate steps to address it.
13. Privacy Rights and Requests
Depending on applicable law, individuals may have rights relating to access, correction, or deletion of their personal information.
Requests will be reviewed according to applicable legal requirements, the nature of the information, and whether Main Street Siteworks or the relevant business customer controls its processing.
For privacy questions or requests, contact:
info.msw@mainstreetsiteworks.com
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the Platform, our information practices, third-party integrations, or applicable requirements.
An updated policy will include a revised effective date or last-updated date.
Where required, we will provide additional notice or obtain consent before using personal information, including Google API user data, for materially different purposes.
15. Contact Information
Rocket & Main Business Management Software Developed and provided by Main Street Siteworks
Legal Entity: Prairie Sky Outdoor Hospitality Advisors, LLC Operating Name: Main Street Siteworks Location: Kansas, United States Privacy Contact: info.msw@mainstreetsiteworks.com Website: https://mainstreetsiteworks.com Contact Page: https://mainstreetsiteworks.com/contact
Rocket & Main is a software brand developed and operated by Main Street Siteworks.