1. Scope
This policy applies to personal information processed through the roa.global website, contact forms, sales conversations, and related service operations.
If we process data on behalf of a customer as a service provider/processor, that processing is governed by our customer agreement and instructions.
2. Information We Collect
We collect information you provide directly and information generated when you interact with our website or services.
- Contact and business details, such as name, company, email address, phone number, and job title.
- Inquiry and communications data, including message contents, scheduling details, and email correspondence.
- Usage and device data, such as IP address, browser type, pages visited, timestamps, and referring URLs.
- Cookie and similar technology data used for site functionality, analytics, and performance measurement.
- Service-related business data that customers choose to connect or share with us through third-party platforms (including Amazon, TikTok, Google, Meta, and Shopify), subject to contract terms and each platform’s applicable developer policies.
3. How We Use Information
- Provide, operate, maintain, and improve our services and website.
- Respond to inquiries, demos, support requests, and business communications.
- Analyze performance, diagnose issues, and secure our systems.
- Send service updates, administrative notices, and permitted marketing communications.
- Comply with legal obligations, enforce agreements, and protect rights and safety.
4. Legal Bases (Where Applicable)
For users in jurisdictions that require a legal basis for processing (such as the EEA/UK), we rely on one or more of the following: performance of a contract, legitimate interests, consent, and legal obligations.
7. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to provide services, maintain records, resolve disputes, enforce agreements, and comply with legal obligations. Data obtained from third-party platform APIs (such as TikTok, Amazon, Google, Meta, and Shopify) is retained only for the duration required to provide the services and is deleted upon customer request or termination of access, in accordance with each platform’s data retention requirements.
8. Data Security
We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to request a copy of your data. You may also opt out of marketing communications at any time.
California residents may have additional rights under applicable state privacy laws, including rights to know, delete, and correct personal information, subject to exceptions.
10. International Data Transfers
We may process information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers in accordance with applicable law.
11. Google User Data (Gmail)
When customers connect a Google account, ROA accesses Gmail messages and attachments solely to display them in the ROA CRM inbox, sync customer support and ambassador conversations, and enable email workflows the customer initiates from within ROA.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Gmail data to serve advertising; we do not transfer it to third parties except as necessary to provide or improve the user-facing features of ROA, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users; we do not allow humans to read Gmail data except where the user has given affirmative consent for specific messages, where required for security investigations to comply with applicable law, or where the data has been aggregated and anonymized for internal operations; and we do not use Gmail data to develop, improve, or train generalized AI or machine-learning models.
Gmail data is stored encrypted at rest and is deleted upon disconnect of the Google account, at customer request, or upon termination of the customer agreement.
12. Children's Privacy
Our website and services are intended for businesses and are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the date above. Material changes may also be communicated by other reasonable means.