Privacy policy
Last updated: May 2026
What we collect
We collect the information you provide directly: your email address, and the relationship data you enter (names, notes, interactions, follow-ups). We do not collect behavioral analytics or sell your data to third parties.
How we use it
Your data is used solely to provide the Roots service to you. We use Supabase to store your data securely with row-level security so only your account can access your records.
Data portability
You can export all of your data from the Settings page at any time as a JSON file. You can also delete your account and all associated data at any time.
Cookies
We use cookies solely for authentication and session management. We do not use tracking or advertising cookies.
Data retention
When you delete your account, all associated data including contacts, interactions, tags, and settings is permanently and immediately deleted from our systems.
Children
Roots is not intended for users under 13 years of age. We do not knowingly collect personal data from children under 13.
Changes to this policy
We may update this policy from time to time. We will notify users of significant changes via email. Continued use of Roots after changes constitutes acceptance of the updated policy.
Jurisdiction
Roots is operated from the United States. By using the service you agree that your data is processed in the United States in accordance with this policy.
Contact
Questions about this policy? Reach out via the contact page.