Rolin Privacy Policy

1. Information we collect

Information you provide

• Account information: email, display name, and avatar; if you use "Continue with Google", the name, email, and avatar provided by Google. Passwords are handled by our identity provider (Google Firebase); we never see them in plain text.
• Your content: scripts, images, videos, audio, 3D scenes, prompts, and comments you upload or generate, and content you share with members of collaborative projects.
• Voice samples: reference audio you upload for character voice cloning. Only upload your own voice or voices you are authorized to use.
• Waitlist and correspondence: the email you submit to join the waitlist and messages you send us.

Information generated when you use the Services

• Generation and billing records: the model, settings, status, cost, and balance changes for each AI generation, and your subscription status.
• Server access logs: IP address, requested URL, time, and status when you reach our servers, used for troubleshooting and security.
• Website analytics (only with your consent): only after you accept the analytics prompt on our website do we use PostHog to record page views, time on page, and a few button clicks (such as "Download" or "Sign up"). No session recording, no form content, and query strings are stripped from URLs. You can withdraw consent at any time under "Analytics settings".
• Update checks: when the Mac app checks for updates it requests our update feed, including the app version.

We do not collect: payment card numbers (handled directly by Stripe); Rolin Cam camera frames or local-scene recordings (they stay on your device and in your photo library and are never uploaded to us).

2. How we use information

• To provide the Services: sign-in, storing and syncing your projects, collaboration, generating content, and delivering downloads.
• Billing: usage charges, invoices, subscriptions, and refunds.
• Security and abuse prevention, including bot checks with Cloudflare Turnstile.
• Service emails: email verification, invitations, balance, subscription, and storage notices.
• Product improvement, based on analytics you have consented to.

We do not sell your personal information and do not use your project content to train our own models.

3. Sharing with third parties

We share information only as needed to provide the Services with the following providers, which process it under their own privacy policies:

We may also disclose or transfer information where required by law, to protect users or the public, or in connection with a merger or acquisition.

About AI generation: when you start a generation, your prompt and reference materials are sent to the corresponding model provider; the result is stored in our storage when it returns. Please do not include sensitive personal information you do not want processed by third parties.

4. Storage location and international transfers

Account, project, and billing data are stored in Alibaba Cloud's Hong Kong region. Official assets (actor and wardrobe libraries) and installers are delivered through Cloudflare's global network. Using these providers means your information may be processed outside your country or region.

5. Retention

• Accounts and projects: kept while you use the Services.
• Deleting a project: the project first enters a 30-day recovery period, after which its files are removed from live storage.
• Deleting your account: available in the Mac app under "Permanently delete account" (any remaining balance must be forfeited first). Cloud projects you own are kept for 30 days and then purged; projects you only joined as a member are not affected.
• Final erasure: once files are removed from live storage, prior versions in storage are permanently erased within 7 days, and copies in database backups are deleted within 31 days as the backups expire.
• Temporary generation results: results are held in a staging area and deleted as soon as they are published into your project; results not placed in a project (such as voice previews or sample shots) are kept for at most 7 days — please download them within that time.
• Server access logs: 14 days.
• Billing records: as long as required by financial and tax laws.
• Website analytics: per PostHog's retention; nothing further is collected after you withdraw consent.

6. Security

All traffic is encrypted with HTTPS; stored files use server-side encryption; database backups are kept off-site and locked against deletion or modification during their retention period; internal access follows least privilege. No system is perfectly secure; if a security incident affects you, we will notify you as required by law.

7. Your rights

You can access and export your projects, correct account information, delete projects or your account (in the Mac app under "Permanently delete account", or by emailing us), withdraw analytics consent, and unsubscribe from marketing emails (service emails excepted). Depending on where you live (for example under the EU GDPR or California CCPA), you may also have rights to restrict or object to processing and to data portability. Contact us at support@rolin.app; we will respond within the time required by law.

8. Age requirement

The Services are intended only for users 18 years of age or older. By creating an account or using the Services, you confirm that you are at least 18. We do not knowingly collect personal information from anyone under 18; if we learn we have, we will promptly delete the account and related data.

9. Changes

We may update this policy. We will give advance notice of material changes on our website or in the apps; continued use after an update means you accept the updated policy.

10. Contact

Wooof LLC (Rolin) · 75 E 3rd St Ste 7, Sheridan, WY 82801, United States · support@rolin.app