Privacy Policy

Last updated Jul 2, 2026

1. Who we are

Roalo is operated by Roalo Software LLC ("we", "us"). This Privacy Policy explains what personal information we collect when you use the Roalo websites and applications (the "Service"), how we use it, who we share it with, and the choices you have.

The Service is intended for users in the United States.

2. Information we collect

Information you provide:

  • Account information — your email address and password (passwords are handled by our authentication provider; we never see them in plain text), and optional profile details such as a display name.
  • Tax profile — information you enter during onboarding and in settings, such as your US state, filing status, filing entity, estimated tax rate, and the gig platforms you work with.
  • Receipts — images you upload and the details extracted from them (vendor, amount, date, category, business-use percentage).
  • Mileage and vehicles — trips you log (date, miles, optional start/end locations and notes) and vehicle details (year, make, model, mileage method).
  • Communications — messages you send us, and your email notification preferences.
  • Waitlist signups — your email address and gig platform if you join our waitlist.

2a. Information collected automatically

Payment information — subscriptions are processed by Stripe, Inc. Stripe collects your card details directly; your full card number never touches our systems. We receive limited billing information from Stripe, such as your subscription status, plan, and billing period.

Usage and device information — when you use the app we collect product analytics events (such as pages viewed and features used), associated with your account, your plan, your US state, and your gig platforms. We use PostHog for this — see our Cookie Policy for the cookies involved and how to opt out.

Error and diagnostic information — we use Sentry to collect error reports so we can fix bugs (always on, as part of running a reliable service). Sentry session replay, which records anonymized snapshots of your screen interactions when an error occurs, is part of this error monitoring.

Cookies — see our Cookie Policy for the full list of cookies and how to opt out of analytics.

3. How we use your information

We use your information to:

  • provide the Service — store and organize your receipts, mileage, and deductions, and calculate estimates based on your tax profile;
  • process receipts with AI — receipt images are sent to a third-party AI model provider (currently Anthropic, via Vercel’s AI Gateway) to extract details and suggest an expense category. Your data is not used to train their models. We log model usage (tokens and cost) to enforce plan limits;
  • process payments and manage subscriptions through Stripe;
  • send transactional and notification emails through Resend (such as weekly summaries and tax-deadline reminders — you can turn these off in settings);
  • generate exports you request (CSV files, audit packets);
  • understand product usage and improve the Service (analytics);
  • monitor for errors, abuse, and fraud, and keep the Service secure (including an internal audit log of account actions);
  • comply with legal obligations.

4. Who we share it with

We do not sell your personal information, and we do not share it with third parties for their own advertising. We share information only with service providers that process it on our behalf under contract:

  • Supabase — authentication, database, and file storage (receipt images).
  • Stripe — payment processing and subscription billing.
  • Vercel — application hosting and AI Gateway routing.
  • Anthropic — AI model provider for receipt categorization.
  • PostHog — product analytics.
  • Sentry — error monitoring and diagnostics.
  • Resend — transactional email delivery.
  • Inngest — background job processing (for example, receipt processing pipelines).

4a. Other disclosures

We may also disclose information if required by law or legal process, to protect the rights, safety, or property of Roalo or others, or as part of a merger, acquisition, or sale of assets (in which case this policy will continue to apply to your information until you are notified otherwise).

5. Cookies

We use a small number of cookies: essential cookies for sign-in and language preferences (always on), and analytics cookies (on by default; we honor the "Do Not Track" browser signal). See the Cookie Policy for details and how to opt out.

6. Data retention

We keep your information for as long as your account is active. If you delete your account, we delete or irreversibly anonymize your personal information within a reasonable operational window, except where we must retain records longer to comply with legal, tax, accounting, or security obligations (for example, billing records).

Note for your own planning: the IRS generally recommends keeping tax records for at least 3 years — export your data before deleting your account.

7. Your rights and choices

You can, at any time:

  • access and update your profile and tax settings in the app;
  • export your data from the export page (CSV, audit packet) or request a full data export;
  • delete your account from settings, which deletes your personal information as described in Section 6;
  • manage email notifications in settings;
  • opt out of analytics (see the Cookie Policy).

7a. US state privacy rights

Depending on your state of residence (for example, California, Colorado, Connecticut, Texas, Utah, or Virginia), you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. We honor these rights for all users through the in-app tools above. To exercise a right you cannot complete in the app, email support@roalo.app; we will verify your request and respond within the time required by law. We do not discriminate against you for exercising your rights.

8. Security

We use industry-standard safeguards to protect your information, including encryption in transit, access controls, and row-level security on our database so that your records are only accessible to your account. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as required by law.

9. Children

The Service is not directed to children and may not be used by anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at support@roalo.app and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you (for example by email or an in-app notice) before they take effect. The "Last updated" date above reflects the latest revision.

11. Contact

Privacy questions or requests: support@roalo.app.

Roalo Software LLC