Privacy Policy

This Privacy Policy describes how we collect, use, store, and share information when you use Rollydex (the “Service”), including when you use the Service as a guest without creating a full account.

Account and session: When you continue as a guest, we create an anonymous Supabase user tied to your browser session (cookies and related storage as implemented by Supabase and our Next.js app). When you register or log in with email and password, we process your email address and password through our authentication provider (Supabase). We do not store your password in plain text.

Content you provide (“Rolly” data): Rolly / home name and related settings (for example privacy preferences where applicable). Vendor or contractor records you add: business names, categories, contact details you enter, notes, ratings, workflow stage, tags, and similar fields. Optional Google Place IDs when you pick a business from Google Places autocomplete (see Third-party services).

Social / sharing features: If you use follow or network features, we store relationships between Rolleys (for example who follows whom) as required to show shared or networked information in the app. If you use a share link, people with the link may see a limited public view of your Rolly (for example business names, categories, and ratings as presented on the public page). Do not share a link if you do not want recipients to see that information.

Technical and usage data: Diagnostics and security logs (for example IP address, user agent, timestamps, error logs) through our hosting stack. Product analytics: we use Vercel Analytics to understand aggregate usage of the web app (for example page views). See Vercel’s documentation for what they collect.

Communications: If you contact us for support, we collect the information you send (for example email content).

We use information to: provide, operate, secure, and improve the Service; authenticate you and maintain sessions (including guest sessions); enable sharing, following, and “echo” / matching features that depend on how contacts relate across Rolleys; and comply with law and enforce our Terms.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

If applicable law requires a “legal basis,” we rely on contract (to run the Service), legitimate interests (security, fraud prevention, product improvement), and, where required, consent (for example for non-essential cookies or marketing, if we add those later).

We share information with service providers who process it on our instructions: Supabase (authentication and database); Google (when your device runs Google Places autocomplete or related APIs as part of adding a contact); Vercel (hosting and analytics). We may also disclose information if required by law, or to protect rights, safety, and security.

We keep your information while your account is active and as needed to provide the Service. We may delete or anonymize information when it is no longer needed, or when you ask us to delete it, subject to legal exceptions.

Empty guest accounts: we may run automated cleanup that deletes certain anonymous accounts that appear unused (for example, beyond a threshold age with no saved contacts and no follow relationships). If you rely on a guest session, add a verified email or keep copies of important data outside the Service so you do not lose access.

We use industry-standard measures appropriate to the size and nature of the Service (including access controls and encryption in transit where supported by our providers). No method of transmission or storage is 100% secure.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict certain processing, and to object or withdraw consent. Contact us at the email below. We may need to verify your request.

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

If you access the Service from outside the country where our providers operate, your information may be processed in other countries. Where required, we use appropriate safeguards.

We may update this Policy from time to time. We will post the updated version and update the “Last updated” date. If changes are material, we will provide additional notice as required by law (for example in-app notice or email).

Rollydex, operated from Austin, Texas, United States. Questions: [email protected]