Privacy Policy

01Information we collect

We collect information in three ways: what you give us, what you authorize us to read from the accounts you connect, and what we collect automatically as you use Rolo.

Information you provide

• Account and contact details — your name, work email, firm, and anything you submit through our early-access or contact forms.
• Communications — messages you send to our team, including support requests and feedback.

Information from your connected accounts

When you connect a data source (see Connected accounts), we process the content and metadata needed to build and maintain a record of the people you know. Depending on the source, this may include:

• Contact identities — names, email addresses, phone numbers, job titles, employers, and profile details of the people you interact with.
• Interaction metadata — who you emailed, met, or messaged, and when; subject lines, calendar event details, and message timestamps.
• Content — the body of emails, messages, and meeting notes, used to summarize context and keep each person's record current.

Information we collect automatically

• Usage data — features you use, searches you run, and actions you take in Rolo.
• Device and log data — IP address, browser type, operating system, and diagnostic logs.
• Cookies — we use strictly necessary cookies to keep you signed in and a limited set of analytics cookies to understand product usage. We do not use advertising cookies.

02Connected accounts

Rolo only reads from a source after you explicitly connect it and grant permission through that provider's standard authorization flow. Supported sources may include email, calendar, professional networks, messaging services, and note and contact services such as Gmail, Google Calendar, LinkedIn, X, WhatsApp, iMessage, Notion, and your device contacts.

Rolo reads your connected sources and may prepare draft replies or messages for you to review, but it never sends, posts, or messages on your behalf — you always decide what, if anything, to send. You can disconnect any source at any time from your Rolo settings or from the provider's own security settings; disconnecting stops future syncing and you may request deletion of data already processed from that source.

People in your network. To build your records, Rolo necessarily processes personal information about the people you have interacted with, who are third parties to your account. We process this information on your behalf and on the basis of your and our legitimate interest in helping you manage your professional relationships. We apply the same security and limited-use protections to it, do not sell it, and will honor verifiable access, deletion, and objection requests from those individuals where the law requires. You are responsible for ensuring your use of Rolo is consistent with any notice or consent obligations that apply to your relationships.

03How we use information

We use the information we collect to:

• Build and maintain a searchable record — a "card" — for each person in your network.
• Answer your questions by surfacing the most relevant people and the context of how you know them.
• Keep records current after each new interaction and remind you when it has been too long since you connected with someone who matters.
• Provide, secure, troubleshoot, and improve the product.
• Communicate with you about your account, early access, and material changes to the service.
• Comply with legal obligations and enforce our Terms of Service.

We do not use the content of your connected accounts to develop, train, or improve generalized or foundation AI/ML models. Where we use machine learning to structure and summarize your data, that processing operates on your data solely to provide Rolo's features to you.

04Google API limited use

05How we share information

We share information only in the limited circumstances below:

• Service providers — vendors who host our infrastructure and help us operate the product under contracts that require them to protect your data and use it only on our instructions.
• Legal and safety — when required by law, subpoena, or legal process, or to protect the rights, property, or safety of Alphawatch, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to the commitments in this policy.
• With your direction — when you ask us to share or export your information.

06We do not sell your data

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under applicable privacy laws. Your network is your professional asset, and it stays that way.

07Data retention

We retain your information for as long as your account is active and as needed to provide the service. When you delete your account, we delete or de-identify your personal information within a commercially reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Backup copies are purged on a rolling schedule.

08Security

We build Rolo for confidential, regulated financial workflows and maintain institution-grade controls, including SOC 2 Type II and HIPAA-aligned safeguards. We encrypt data in transit and at rest, enforce least-privilege access, and monitor our systems continuously. No method of transmission or storage is perfectly secure, but we work hard to protect your information and to notify you of material incidents as required by law.

09Your rights & choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. These rights apply to residents of the EEA and UK under the GDPR, to California residents under the CCPA/CPRA, and to residents of other jurisdictions with comparable laws.

• Access and portability — request a copy of the information we hold about you.
• Correction and deletion — ask us to fix or delete your information.
• Disconnect — remove any connected source at any time.
• Complaints — lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@alphawatch.ai. We will not discriminate against you for exercising your rights.

10International transfers

Alphawatch is based in the United States, and we may process your information there and in other countries where we or our service providers operate. Where required, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses — to protect information transferred across borders.

11Children's privacy

Rolo is a workplace product intended for business users and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

12Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you by email or through the product. Your continued use of Rolo after an update means you accept the revised policy.

13Contact us

Questions about this policy or your data? We're happy to help.

• Email — privacy@alphawatch.ai
• Company — Alphawatch, on the web at alphawatch.ai