rovlead

Privacy Policy

Last updated: August 2, 2026

This policy explains what data rovlead ("we", "us") collects when you use rovlead.com, why we collect it, and the choices you have. Questions are welcome at info@rovlead.com.

1. Data we collect

  • Account data: email address, name (if provided), hashed authentication data, two-factor settings and session information.
  • Google sign-in: if you sign in with Google we receive your name, email address and profile picture from Google. We do not receive your Google password.
  • Connected mailbox: the address, server settings and credentials or tokens of the mailbox you connect. Credentials are stored encrypted at rest and are never displayed back to you or anyone else.
  • Campaign and lead data: the campaigns you create, the business contacts you collect through the product, and sending activity (such as sent, replied or failed states).
  • Billing data: credit balance and transaction history. Card details are handled by our payment provider and never touch our servers.
  • Technical data: log and security data strictly needed to operate the service, such as IP address and browser information for session security and abuse prevention.

2. How we use data

  • to provide the service: authentication, sending your campaigns from your mailbox, tracking campaign state and managing credits;
  • to secure the service: session management, two-factor authentication, abuse and fraud prevention;
  • to communicate service messages such as security notifications (for example when your password changes);
  • to comply with legal obligations.

We do not sell personal data and we do not use your campaign content for advertising.

3. Google user data and Limited Use

If you connect a Gmail mailbox, rovlead requests the minimum Google scope needed to send the emails you compose (gmail.send). We do not read your inbox. rovlead's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account tokens are stored encrypted, used only to provide the mailbox sending feature, and are deleted when you disconnect the mailbox or delete your account.

4. Recipient data and your responsibilities

The business contacts you collect and email through rovlead are processed on your instructions: for that data you act as the data controller and rovlead acts as a processor. You are responsible for having a lawful basis to contact recipients and for honoring opt-outs.

5. Storage, sharing and retention

  • Data is hosted with our infrastructure providers (including Supabase and Vercel) and protected with encryption in transit; mailbox credentials are additionally encrypted at rest.
  • We share data only with the service providers needed to run rovlead (hosting, authentication, email infrastructure, payments) under their own data processing terms, or when required by law.
  • We keep your data while your account is active. Deleting your account from Settings removes your account data, connected mailbox credentials and campaign data from the live systems within a reasonable period.

6. Cookies

rovlead uses strictly necessary cookies for authentication and security (keeping you signed in, protecting forms against abuse). We do not use third-party advertising cookies.

7. Your rights

Depending on where you live (including under GDPR), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in Settings, or by emailing info@rovlead.com. You also have the right to complain to your local data protection authority.

8. Changes

We will post any changes to this policy on this page and update the date above. Material changes will be communicated in the product or by email.