Privacy Policy

Rolo ("Rolo," "we," "our," or "us") operates tryrolo.com and the Rolo mobile application (collectively, the "Service"). This Privacy Policy describes how we collect, use, and share information about you when you use our Service.

By using Rolo, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Service.

Information you provide directly:

• Account registration details: name, email address, and password (or OAuth credentials)
• Organization and community information: community name, description, and settings you configure
• Member data you add: names, contact information, membership status, notes, and custom fields for members of your community
• Payment and billing information (processed by our third-party payment processor — we do not store full card numbers)
• Communications you send us via email or support channels

Information we collect automatically:

• Log data: IP address, browser type, pages visited, time and date of visits, and referring URLs
• Device information: operating system, device identifiers, and mobile network information
• Usage data: features used, actions taken within the app, and interaction patterns
• Cookies and similar tracking technologies (see below)

Cookies & Tracking: We use cookies and similar technologies to maintain session state, remember your preferences, and analyze usage. You can control cookies through your browser settings, though disabling them may affect functionality.

We use the information we collect to:

• Provide, operate, and improve the Rolo Service
• Create and manage your account and community
• Process transactions and send related information (receipts, invoices)
• Send administrative notices, updates, and security alerts
• Respond to comments, questions, and support requests
• Monitor and analyze usage trends to improve user experience
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Comply with legal obligations

We will not use your information for purposes materially different from those described in this policy without obtaining your consent.

Rolo may offer sign-in via Google OAuth. When you choose to authenticate with Google, we receive:

• Your Google account name and email address
• A unique identifier associated with your Google account
• A profile photo (if you have one set)

We use this information solely to create and authenticate your Rolo account. We do not access your Google Drive, Gmail, contacts, or any other Google services beyond the basic profile scope needed for sign-in.

You may revoke Rolo's access to your Google account at any time through your Google Account permissions page. Revoking access will not delete your Rolo account data — contact us separately if you wish to delete your account.

We do not sell your personal information. We may share your information only in these circumstances:

• Service providers: We share data with trusted third-party vendors who help us operate the Service (e.g., cloud hosting, payment processing, analytics). These vendors are contractually bound to protect your data and may not use it for their own purposes.
• Within your organization: Information you add about community members is accessible to other authorized administrators in your Rolo organization.
• Legal requirements: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect rights, property, or safety.
• Business transfers: If Rolo is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
• With your consent: We may share information for any other purpose with your explicit consent.

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain certain information as required by law or for legitimate business purposes.

If you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law or where it is necessary to resolve disputes or enforce our agreements.

Member data you've entered for your community will be deleted upon account closure unless you export it first. We recommend exporting your data before closing your account.

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, loss, destruction, or alteration. These include:

• Encryption of data in transit (TLS) and at rest
• Access controls and authentication requirements for our team
• Regular security reviews and vulnerability assessments

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information
• Portability: Receive your data in a structured, machine-readable format
• Objection / Restriction: Object to or restrict certain types of processing
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise these rights, contact us at work@binalabs.org. We will respond within 30 days (or the timeframe required by applicable law).

You may update or correct your account information at any time by logging into your account settings.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13 without parental consent, we will promptly delete that information.

If you believe we have inadvertently collected information from a child under 13, please contact us at work@binalabs.org.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (at the address associated with your account) or by posting a prominent notice within the Service prior to the changes becoming effective.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.