Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account Information: Your email address, name, and profile details provided during registration
• Payment Information: Payment processing is handled by Stripe. We do not store your credit card numbers, CVV, or full card details on our servers. We retain only transaction records and billing history
• Usage Data: Information about how you use the Service, including videos generated, scripts created, credits consumed, and feature interactions
• Technical Data: IP address, browser type and version, device type, operating system, referring URLs, and access timestamps

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Rolo platform, including generating videos and managing your account
• Payment Processing: To process transactions, manage credits, and handle billing through Stripe
• Platform Improvement: To analyze usage patterns, identify issues, and develop new features that better serve our users
• Communications: To send transactional emails (e.g., render completion notifications, receipts, account alerts). We do not send unsolicited marketing emails without your consent
• Analytics: We use PostHog for product analytics to understand how users interact with the platform and identify areas for improvement

3. AI Processing

Rolo uses third-party AI services to generate video content. When you use the Service:

• Script Processing: Your scripts are processed by Claude (Anthropic) for refinement and optimization
• Video Generation: Video content is generated using AI providers including Higgsfield and Kling
• Data Use Limitation: Your content is processed solely for the purpose of delivering the Service to you. Your scripts, prompts, and generated content are not used to train any AI models

4. Data Sharing

We share your information only with the following categories of service providers, and only to the extent necessary to deliver the Service:

• Stripe: Payment processing and billing
• AI Providers: Anthropic, Higgsfield, and Kling for content generation and processing
• PostHog: Product analytics and usage tracking
• Sentry: Error tracking and performance monitoring

We do not sell your personal data. We will never sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Storage & Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it:

• Account and application data is stored in a Supabase-managed PostgreSQL database
• Generated videos and media assets are stored in encrypted cloud storage
• All data is encrypted in transit using TLS (Transport Layer Security)
• We implement role-based access controls to limit internal access to user data
• We regularly review our security practices and update them as necessary

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data, subject to legal obligations
• Right to Data Portability: Request a machine-readable copy of your data to transfer to another service
• Right to Object: Object to the processing of your personal data for certain purposes

To exercise any of these rights, please contact us at support@roloads.com. We will respond to your request within 30 days.

7. Data Retention

We retain your information according to the following schedule:

• Account Data: Retained for as long as your account is active. Deleted within 30 days of account closure.
• Generated Videos: Retained while your account is active. Deleted within 90 days of account closure.
• Transaction Records: Retained as required by applicable tax and accounting regulations (typically 7 years).
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely.

8. Cookies

We use essential cookies for authentication and security, and optional analytics cookies to improve the platform. For detailed information about the cookies we use, please see our Cookie Policy.

9. Children

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@roloads.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• General Support: support@roloads.com
• Data Protection Officer: privacy@roloads.com