Privacy Policy

Information we collect

Account data: If you join the waitlist we collect your email address, and optionally your name and company. Subscriber accounts are not open yet, so we do not currently take payments or hold any payment information. When subscriptions open, payment will be handled by a third-party merchant of record and card details will never reach our servers.

Usage data: We collect information about how you use the platform — pages viewed, searches performed, records accessed, features used — to improve the product and monitor for abuse. This data is associated with your account.

Communications: If you contact us by email, we retain those communications to assist you and improve our service.

What we do not collect: We do not use third-party advertising cookies, social tracking pixels, or cross-site tracking technology. We do not purchase or import third-party contact lists.

How we use your information

We use your information to: provide and operate the service; send the weekly brief and product notifications (an unsubscribe link is included in every message); respond to support requests; detect and prevent fraud or abuse; and analyse platform usage to improve the product. We do not sell your personal data to third parties. When subscriptions open, we will also use it to process payments and will name the processor here before doing so.

Third-party service providers

We share data with the following categories of service providers who process it on our behalf: email delivery (Brevo), hosting, CDN and database infrastructure (Cloudflare, including Pages, Workers and D1), supplementary database infrastructure (Supabase), and analytics (Google Analytics 4, only with your consent). We use no payment processor at present because subscriber accounts are not open; this section will be updated with the named processor before any payment is taken. Each provider is bound by its own privacy policy and applicable data protection law. We do not share your data with any other third parties without your consent, except as required by law.

Cookies and analytics

We use minimal first-party cookies for session management and authentication.

We use Google Analytics 4 to understand how the site is used. It runs under Google Consent Mode with analytics storage denied by default: no analytics cookies are set and no analytics data is collected unless you press Accept on the cookie banner. Choosing Decline, or simply ignoring the banner, leaves analytics switched off. IP anonymisation is enabled. You can change your mind at any time by clearing this site's data in your browser, which restores the default denied state.

We do not use advertising pixels, remarketing tags, or cross-site tracking technology on rollupintel.com, and we do not run Google Ads or Meta advertising tracking.

Data retention

We retain account data for the duration of your subscription plus 24 months, after which it is deleted or anonymized. Usage logs are retained for 12 months. Email communication history is retained for 36 months. You may request earlier deletion as described below.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing [email protected]. We will respond within 5 business days. Newsletter unsubscribe links are included in every email. If you are located in the European Economic Area or California, you may have additional rights under GDPR or CCPA — contact us to exercise them.

Operator data in our database

Operator records come from two official Texas sources and nothing else: the Texas Department of Agriculture Structural Pest Control Service commercial licence file, and the Texas Comptroller sales tax permit and active franchise taxpayer files, which supply city, permitted location counts, incorporation date and entity standing where a confident name match exists. We do not use purchased contact databases, scraped listings, or credit data.

Most of what these records contain describes a business. Two fields do not: the operator of record and the responsible applicator are the names of individuals, published by the regulator as part of the licence itself. We treat them as business-context public records rather than marketing data, and handle them accordingly: they are never displayed on the public website, they are excluded from the public API, they are available only to authenticated subscribers, and they are never sold as a contact list. If you are named in a record and wish to discuss it, contact us at the address below.

If you are a pest control operator who believes a record about your business is materially inaccurate, contact us at [email protected] with supporting documentation and we will review within 5 business days. Correction requests for factual errors in public records are handled in good faith.

Security

We implement reasonable technical and organizational measures to protect your data, including TLS encryption in transit, access controls, and regular security reviews. No system is perfectly secure; if you become aware of a security vulnerability, please disclose it responsibly to [email protected].

Contact

Questions about this policy, your subscription, or your data: [email protected]

Related

Our Terms of Service govern use of the platform. How we source and verify data is described on our methodology page.