They believe we using their software and are the data controllers.

The below link I think shows that Rocketbots are controllers and not us.

So does Rocketbots have an individual database for each of its clients or is it all stored in one database i.e. joint controller.

I can’t see how we are the only controller when we are not deciding what personal data is being collected as only Rocketbots do.

We don’t have complete autonomy of how the data is processed as Rocketbots decide how it is processed.

If Rocketbots were only a processor we would be able to decide when the data was deleted and how long it was retained. We don't have that control.

And as a controller surely we would be able to access the raw data as Rocketbots are collecting it on our behalf, but for some reason, we are not able to see that data, surely this alone makes them controllers of data.

https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/controllers-and-processors/