Privacy Policy

This policy applies to the official Rolino website and managed service at getrolino.com, including its waitlist, web application, API, CLI authorization, and connected social publishing features. Rolino is currently operated by Vlad Palacio in Ontario, Canada.

A self-hosted Rolino deployment is controlled by its operator, not by the official hosted service. That operator is responsible for its own privacy notices, data practices, and legal obligations.

Depending on how you use Rolino, we may process:

• Waitlist and contact information, such as your email address and messages you send us.
• Account information, including your name, email address, authentication records, organization membership, and account settings.
• Workspace content, including brand details, captions, drafts, schedules, uploaded media, publishing settings, and team invitations.
• Connected-account information, including Instagram or TikTok account identifiers, display names, profile images, granted permissions, encrypted access credentials, connection health, and publishing results.
• Technical and security information, including session identifiers, IP address, browser or device information, timestamps, application logs, API activity, and agent authorization or audit records.

We receive some of this information directly from you and some from services you choose to connect, including Meta and TikTok.

• Provide authentication, workspaces, media storage, scheduling, and publishing.
• Connect to social accounts and carry out actions you expressly request.
• Deliver transactional emails and important publishing or security notices.
• Protect accounts, prevent abuse, troubleshoot failures, and maintain audit records.
• Operate the waitlist, respond to support requests, and improve Rolino.
• Comply with applicable law and enforce our terms.

Where a legal basis is required, we rely on performing our contract with you, your consent, our legitimate interests in operating and securing Rolino, and compliance with legal obligations. You may withdraw consent for a connected social account by disconnecting it. This does not affect processing that occurred before withdrawal.

We share information only as needed to operate Rolino, follow your instructions, protect the service, or comply with law. Current categories of recipients include:

• hosting and application delivery providers, including Vercel;
• database and infrastructure providers, including Supabase;
• object storage and delivery providers, including Cloudflare;
• transactional email providers, including Zoho ZeptoMail;
• waitlist providers, including FeedbackBasket when waitlist mode is enabled; and
• social platforms you connect, currently Meta/Instagram and TikTok.

These services process information under their own terms and privacy policies. We do not sell personal information and do not use it for third-party targeted advertising.

We generally keep account and workspace information while your hosted account is active. Publishing history, security records, and limited logs may be retained as reasonably necessary for reliability, fraud prevention, dispute resolution, or legal compliance.

Disconnecting a social account removes its active credentials from Rolino but does not delete posts already published to that platform. To request deletion of hosted Rolino data, follow our data-deletion instructions. Residual copies may remain temporarily in backups or where retention is legally required.

Rolino uses safeguards intended to protect information, including encrypted social access credentials, access controls, scoped API credentials, confirmation for consequential agent actions, and secret-safe logging practices. No online service can guarantee absolute security, so please use a strong account and protect any credentials issued to you.

Depending on where you live, you may have rights to access, correct, export, delete, or restrict processing of personal information, or to withdraw consent and complain to a privacy regulator. We may need to verify your identity before completing a request.

You can disconnect social accounts from Connections, revoke CLI and MCP access from Agent access, and delete individual brands from Brand settings. For an account-level request, email privacy@getrolino.com.

Rolino and its service providers may process information in Canada, the United States, and other countries. Those countries may have different privacy laws from your home country. Where required, we use appropriate contractual or other safeguards for these transfers.

The hosted service is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to Rolino, contact us so we can investigate and remove it.