Privacy Policy
Effective: April 3, 2026
Rollout LLC (“Rollout,” “we,” “us”) operates the rolloutrobotaxi.com platform. This Privacy Policy explains what information we collect, how we use it, and your choices.
1. Information We Collect
Information you provide:
- Business name, contact name, email address, phone number, and website when you apply through our Get Started form
- Industry, package tier selection, and wrap design preferences
- Messages sent through the in-app chat feature
Information collected automatically:
- QR Code Scans: When someone scans a QR code on a wrapped vehicle, we collect an anonymized hash of the IP address (we do not store raw IP addresses), approximate city and region derived from the IP, device type, operating system, browser type, and referring URL.
- Geolocation: Approximate latitude and longitude derived from the scanner’s IP address (not GPS-level precision) for aggregate heatmap analytics.
- Authentication: When you sign in, Rollout uses Google OAuth (primary) or an email-confirmation magic link (alternative for accounts without Google identities). With Google OAuth, we receive your email address, display name, and profile photo from Google. With the magic link, we send a one-time sign-in link to your email (15-minute expiration, single-use). Rollout does not store passwords.
- Cookies: We use a single session cookie (
rollout_session) to keep you signed in. We do not use advertising or third-party tracking cookies.
2. How We Use Your Information
- To create and manage your advertising account
- To provide QR scan analytics and campaign performance data
- To send invoices and billing communications
- To send periodic scan-activity and billing communications via email (opt-out requests are handled manually via customer support until in-portal preference controls ship)
- To respond to support inquiries
- To improve our services and detect misuse
3. Information Sharing
No scan-data sale policy. Rollout does not sell, license, or otherwise monetize raw scan event data to third parties. Advertisers receive aggregated analytics on their own campaigns only.
We do not sell your personal information. We share data only with:
- Service providers that help us operate (Vercel for hosting, Neon for database, Stripe for payments, Resend for email, Google for authentication)
- As required by law or to protect our legal rights
4. Data Retention
We retain different data categories for different periods, aligned with operational and legal obligations:
- Raw scan events — up to 90 days of raw scan detail (timestamp, device class, coarse location derived from IP).
- Aggregated scan analytics — up to 24 months of aggregated, non-identifying campaign metrics.
- Impression and ride data (via Tesla Fleet API) — up to 24 months.
- Advertiser account data — for the lifetime of your active account, plus 12 months after cancellation to service billing and tax-compliance obligations.
If you close your account and want expedited deletion beyond the minimums above, email customersupport@rolloutrobotaxi.com and we will process the request within our SLA, subject to legal retention requirements (for example, billing records).
5. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Opt out of non-essential communications
To exercise any of these rights, email us at customersupport@rolloutrobotaxi.com. We acknowledge requests within 1 business day and aim to respond within 7 business days (typical turnaround is 2–3 business days).
6. Payment Information
Payment processing is handled by Stripe, Inc. We do not receive, store, or have access to your full credit card number. All payment data is processed directly by Stripe in accordance with PCI DSS standards. Please review Stripe’s Privacy Policy for how they handle your payment information.
7. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS 1.3), hashed IP addresses, and secure authentication tokens. No system is 100% secure, but we take reasonable steps to protect your information.
In the event of a data breach affecting your personal information, we will notify you in accordance with Indiana Code § 24-4.9 (Indiana’s data breach notification law) and any other applicable laws.
8. Analytics
We may use privacy-focused analytics services (such as Plausible Analytics) to understand how visitors use our public-facing pages. These tools do not use cookies, do not collect personal data, and comply with GDPR, CCPA, and PECR. No personal information is shared with analytics providers.
9. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You may request a copy of the personal information we have collected about you.
- Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
- Right to Opt Out of Sale: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, email customersupport@rolloutrobotaxi.com or request a data export by email (automated portal delivery is on our launch roadmap).
10. Data Export
Account owners can request a full data export (scans, invoices, messages, QR codes, and account details) by email request to customersupport@rolloutrobotaxi.com. An automated in-portal export is on our launch roadmap; until it ships, we process export requests manually within our SLA.
11. Children
Our services are not directed to children under 16. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 16, we will delete it promptly.
12. Changes
We may update this policy from time to time. Material changes will be communicated via email at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.
13. Contact
Rollout LLC
Evansville, IN 47715
customersupport@rolloutrobotaxi.com