Privacy Policy

1. Introduction

RolloutPal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and authentication credentials
• Project Data: Release project names, dates, tasks, and timelines
• Contact Information: Names, roles, and emails of collaborators you add
• User Content: Any content you create, upload, or share through the Service

2.2 Information Automatically Collected

• Usage Data: How you interact with our Service, features used, and time spent
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies: Small data files stored on your device for authentication and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process your requests and transactions
• Send you technical notices and support messages
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third-party services that help us operate (hosting, analytics, authentication)
• Legal Requirements: When required by law, court order, or government request
• Safety and Rights: To protect rights, property, or safety of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Third-Party Services

Our Service integrates with third-party services:

• Supabase: Database and authentication services
• Vercel: Web hosting and deployment platform
• Analytics Services: To understand usage patterns and improve our Service

These services have their own privacy policies governing the use of your information.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. You may delete your account at any time, which will remove your personal information from our active databases.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your information receives adequate protection.

9. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing

10. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings, but disabling cookies may affect the functionality of our Service.

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information.

14. European Privacy Rights

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights mentioned in Section 9 above. Our lawful basis for processing your information includes consent, contract performance, and legitimate interests.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us through the support channels available in our application.