Privacy

Rolo exists to help you work with your own audience. It is not a data broker, and your audience is never our product.

What we store

• Your account: name, email, a salted scrypt hash of your password, and your plan.
• Your workspace: the compiled result of the exports you import, plus the notes, stages, tags and follow-ups you add.
• Leads submitted through your public capture pages.

How exports are handled

Export files are unzipped and parsed in your browser. Only the compiled, de-duplicated result is uploaded. Rolo never logs into your social accounts, never runs a browser extension, and never scrapes.

Roles under GDPR, UK GDPR and India’s DPDP Act

For the people in your workspace, you are the controller and Rolo is your processor. We process workspace data only to provide the service to you. You are responsible for having a lawful basis to contact the people you import. A social connection’s visible email is not consent to marketing email.

Sub-processors

• Vercel (hosting and private storage)
• Stripe (payments, for paid plans)

Never

• We never sell or rent your data.
• We never use workspace data to train AI models.
• We never email the people in your workspace.

Deletion

Settings → Account → Delete account permanently removes your account and every object in your workspace. Deleting a person in Rolo removes them across all merged sources.