Data note

One page on what Rolloo stores, who processes it, who can see it, how to delete it and what the tool is for. Effective 2 September 2026. The full Privacy Policy and Terms of Service still apply.

1. What we store

  • Account: your email address and, if you set one, your name and avatar.
  • Practice: every case attempt and the full chat transcript of the conversation with the AI counterpart.
  • Assessment: the AI score and written assessment for each attempt, and the competency scores derived from them.
  • Feedback: the ratings you give a case after practising.
  • Team pilot: if you were invited by your company, the organization you belong to, your role in it (owner, admin or member), invitation status, and any cases assigned to you with their due dates.
  • Analytics: cookieless product analytics (Umami) plus a first-party egbe_visitor_id cookie that lives for one year and first-touch campaign parameters (UTMs) kept in your browser's local storage. These tell us which page or campaign a visit came from; they hold no name or email.
  • Only with your consent: session replay (Umami recorder, moderate masking) and the Reddit advertising pixel. Both load only after you accept analytics cookies in the banner, and stop when you withdraw consent.

Voice chat is switched off. We do not record audio.

2. Who processes it

  • Supabase hosts the database and authentication.
  • The language-model provider generates the counterpart's replies and the assessment. Depending on configuration this is Google Generative AI called directly or the Vercel AI Gateway. The conversation content is sent to it for that purpose.
  • Langfuse manages the prompts and receives traces of model calls, including the conversation content, so we can review quality and fix bad answers.
  • Sentry receives error reports when something breaks.
  • Umami receives the cookieless analytics events described above, and the consent-gated session replay.
  • Stripe processes payments. We never see your full card number.

3. Who can see what

  • You, the manager: everything about your own practice, including transcripts, assessments and scores.
  • Your team admin (the person who bought the pilot, and anyone they made an admin): which cases you completed, how many attempts you made, when you last practised, and how your assessment scores move over time. Never the transcript, never the written assessment text, never your feedback ratings.
  • Rolloo operators: for support and quality work only, for example when you report a broken case or a wrong assessment.

Cases written by your team are shared with your team's members. They do not appear in the public catalogue. Use fictional or anonymised names in them.

4. Deletion

Email elowen.ashford@egbe.app from the address on your account. We fulfil deletion requests within 14 days.

Deleted: your account and profile, all chat transcripts, assessments and scores, feedback ratings, your team membership and assignments, and the corresponding traces at the language-model tracing provider. Analytics events are pseudonymous: they carry an account id, never your name or email, and are kept only as aggregate statistics; payment records stay with Stripe for as long as tax law requires.

If you leave a company pilot, the team admin removes your seat; that removes you from the organization but keeps your personal account and practice history unless you also ask us to delete them.

5. Purpose

Rolloo is for practice and development. The AI feedback is coaching: it tells you what to say differently next time. It is not a performance record, it is not calibrated as an assessment instrument, and it is not to be used for employment decisions such as promotion, pay or termination.

Data controller

Egbe Inc. Questions about this note: elowen.ashford@egbe.app.