Privacy

What we collect

• Presence data from public sources. To build a draft presence we use public professional information about a broker — name, licence or BRN, areas, and credentials. A draft stays private until the broker claims and publishes it.
• Account data. Your email address, used to claim and manage your presence and to send you a sign-in link. We use magic links, not passwords.
• AI Visibility Check inputs. The name, area, and optional website or BRN you enter. We store the result so your shareable link keeps working. We store a hashed form of your IP address only to prevent abuse, and delete it within an hour.
• Usage data. Standard server logs needed to run and secure the service.
• AI assessment data. Your name and email, payment status, optional preparation, session notes, and the private action plan prepared for you. We do not receive or store your full card number.

How we use it

To build and verify presences, run the visibility check, send sign-in and claim emails, deliver and administer paid AI assessments, prevent abuse, and improve the service. We do not sell your personal data.

AI assistants

The visibility check sends your query to third-party AI providers — Perplexity, OpenAI, Google, and Anthropic — to retrieve what they say about a broker. Their handling of that query is governed by their own terms.

Verification

Credentials are checked against public registries, such as the Dubai Land Department. TopStreet presents and links to the registry; it is not the registry, and verification reflects registry data at a point in time.

Sharing

We use service providers for hosting, email, AI search, Stripe payment processing, and Google Calendar booking. They receive only the information needed to provide their part of the service and handle it under their own terms and privacy notices. We do not sell personal data.

Your choices

You can claim, edit, or unpublish your presence at any time. Seeded presences stay private until claimed, and you can opt out of outreach. Assessment plans are private and require the secure link issued for that plan. To request access, correction, or deletion of your data, email privacy@joinrollo.com.

Retention

Visibility-check results persist so shared links keep working. The hashed IP used for abuse prevention is deleted within about an hour. Assessment records are kept while needed to deliver the service, maintain business records, and meet legal obligations; you can ask us to delete data we no longer need.

Your Growth Engine map

What we collect: your map, the business details you enter, your name and email. Why: to reply to your map and arrange your debrief — that's the basis we rely on: you send it to get the reply (consent). Marketing is a separate choice above. Where: stored with our infrastructure providers (Vercel, Supabase). How long: 12 months from our last contact, then deleted — or earlier on request via /rollo/contact. Your rights: ask us any time to access, correct or delete what you sent.

Contact

Questions about privacy: privacy@joinrollo.com.