RollDeep Privacy Policy

Last Updated: July 1, 2024

Rolldeep (“Rolldeep,” “we,” “us,” or “our”) makes travel experiences easier by allowing travelers, hosts, and hospitality vendors to work together to optimize stays. This privacy policy (“Privacy Policy”) is designed to help you understand how we collect, use, and share your personal information and to help you understand and exercise your privacy rights.

‍

SCOPE

This Privacy Policy applies to personal information processed by us on our website (https://www.rolldeep.com/), mobile applications, and related services and offerings (collectively, the “Services”). By accessing our Services, you are agreeing to the terms of this Privacy Policy. This Privacy Policy is incorporated by reference into the RollDeep suite of Terms of Service, including the User Terms of Service, the Vendor Terms of Services, and the Host Terms of Service (collectively the “Terms”).

‍

1. INFORMATION WE COLLECT

The categories of information we collect depend on how you interact with us, our Services, and the requirements of applicable law. For example, we may collect different information from you depending on whether you are a visitor to our website or register to use our Services.

“Personal Information” means information that can be used to identify you, as further described below. Your submission of Personal Information is voluntary, but we may be unable to provide you requested information or services if you choose not to provide necessary Personal Information. We or our representatives may collect the following categories of Personal Information:

• Identifiers - A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, driver's license number or other similar identifiers

• Commercial information - Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

• Internet or other similar network activity - Browsing and search history in our application, information on a consumer's interaction with our website, application, or advertisement.

• Geolocation data - Physical location or movements.

• Sensory data - Audio recordings for purposes such as customer service calls or other interactions where audio data is relevant to our Services. Electronic, visual, thermal, olfactory, or similar information as is defined in the state of California.

• Professional or employment-related information - Current or past job history or performance evaluations.
• Categories of Personal Information as defined by the California Customer Records Statute (Cal. Civ. Code §1798.80(e)):

• Identifying information such as name, signature, Social Security number, physical characteristics, address, and telephone number.
• Government identifiers such as passport number, driver's license or state identification card number.
• Financial information including bank account number, credit card number, debit card number, insurance policy number, and other financial information.
• Personal history including education, employment status, and employment history.
• Health and medical information, including medical conditions and health insurance information.

• Protected Classification Characteristics (Under California and Federal Law)::

• Demographic data such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, and medical condition.
• Characteristics of protected classifications such as physical or mental disability, sex (including gender, gender identity, gender expression), pregnancy or childbirth and related medical conditions, sexual orientation, veteran or military status, and genetic information (including familial genetic information).

This information is collected to comply with legal obligations, provide and improve our services, and meet our diversity and inclusion goals. We handle this data with heightened care and security to respect your privacy and ensure compliance with applicable laws.

We may collect Personal Information that is considered “sensitive” in some jurisdictions to the extent you create such information by using our application, or to the extent you share it with us. You are not required to provide sensitive information to use our application. However, if you provide it, it will be used in accordance with this policy.

We also collect “Non-Personal Information,” meaning technical and other information that does not identify you personally. Non-Personal Information also includes information that may originally have been Personal Information but has been aggregated or anonymized such that it cannot be used to identify any individual or has been segregated from other Personal Information.

‍

2. HOW WE OBTAIN YOUR PERSONAL INFORMATION

When you register for and use the Services. When you register for the Services, we typically collect fields such as your first name, last name, email address, postal address, telephone number, birthdate, profile picture, and demographic information(e.g., gender). We also collect information about actions inputted into the Services, such as tasks you have assigned or accepted, which may include Personal Information.

Your communications with us. We may collect your name, email address, postal address, and telephone number when you request information about our Services, register for email or SMS alerts, request customer or technical support (via email or SMS), or otherwise communicate with us. When applying for a job, we may collect resume/CV, cover letters, and similar materials.

Surveys/Questionnaires/Your Content. We may contact you to participate in surveys or other questionnaires, or the Services may offer you the opportunity to create original content which can be shared with other users (“Content”). If you decide to participate, you may be asked to provide certain information, which may include Personal Information.

From Third-Party Service Providers on Our Platform: In addition to the information you provide directly, we may also receive your Personal Information from third-party service providers, such as hosts who use our platform to manage their bookings. For example, a host may enter your name and email address into RollDeep to send you an onboarding email, which is part of the service we offer to facilitate your travel experience. This does not include creating an account for you; you are responsible for creating your RollDeep account independently of any information entered by your Host.

While we encourage hosts to obtain your consent before sharing your Personal Information with us, we understand that this may not always be the case. If you have not consented to share your information, or if you wish to review, update, or delete any Personal Information that has been provided to us by a host, please contact us directly. We are committed to ensuring that your privacy rights are respected and will take appropriate steps to address your privacy rights.

Initiated From Third-Party Providers With Whom You Have Accounts: Our Services may offer you the option to link your RollDeep account with various third-party platforms, such as payment processors, travel services, booking systems, and calendar and scheduling tools, collectively referred to as "Third-Party Providers." This integration is designed to import relevant Personal Information from those Third-Party Providers to enhance and personalize your experience on our platform.

Please note that this account linking is entirely at your discretion and requires your explicit consent, either provided to us or to the Third-Party Provider. By choosing to link your accounts, you acknowledge and agree that we will receive Personal Information from these Third-Party Providers. This process is meant to provide a richer, more effective user experience by leveraging the capabilities of these external services within RollDeep.

Automatic Data Collection. We, or our third-party partners, may collect personal information and de-identified information automatically when you use our Services, such as your Internet protocol (IP) address, user agent string (e.g., browser or device information), user settings, actions taken on the Services, browser or device information, location information (including approximate location at derived from IP address or, as applicable, as otherwise allowed via your consent through the device’s operating system), and Internet service provider, for purposes such as analytics, machine-learning, security, and otherwise providing more streamlined/optimized, personalized, or relevant features and functionality on the Services. This information is collected via various technologies, including mobile SDKs, pixels or cookies on our websites, or server logs, which may be provided by us or our third-party partners (e.g. AWS, Google Analytics, Amplitude, New Relic). Cookies are identifiers that we transfer to your device to enable our system to recognize you and your personalized settings, to better understand how you interact with the Services, to monitor aggregate usage, and to optimize web traffic routing on our website. You may be able to disable or limit the use of cookies in your browser or device settings, but please note that certain parts or features of the Services may not be fully functional if you do so.

Targeted Advertising. We may take advantage of certain targeted or interest-based advertising, which will utilize technologies such as cookies to recognize you across websites for these purposes. Please see Section 5 for more information on the opt-out options provided by these companies in relation thereto and within the advertising industry generally.

‍

3. HOW WE USE YOUR INFORMATION

We use your information for a variety of business purposes, as described below.

A. Provide Our Services

We use your Personal Information to provide you with our Services, such as:

• Managing your information and accounts;
• Providing access to certain areas, functionalities, and features of our Services;
• Facilitating connections to, and transactions with, third-party partners as part of our Services;
• Facilitating intragroup traveler chats;
• Answering requests for customer or technical support; and
• Communicating with you about your account, activities on our Services including policy changes;

B. Legitimate Business Purposes

We use your Personal Information for various other legitimate business purposes, such as:

• Improving, upgrading or enhancing our Services, including through automation and machine learning, such as by providing you with personalized suggested tasks, trips, or experiences based on your, and others’, usage of the Services;
• For example, using machine learning, we may create inferences about what group members are typically responsible for within a travel group, based on aggregate information such as age, gender, and city/state location. Then we may use such inferences to pre-populate or re-configure certain aspects of the user experience, such as auto-assigning tasks, time of day, etc.
• We may also analyze specific travel dynamics, such as time of year, types of activities booked, amenities requested, and, using inferences based on the above or within that particular booking, make similar inferences to pre-populate or re-configure certain aspects of the user experience as applicable to that individual traveler or group of travelers.

• Pursuing our legitimate business interests such as research and development (including marketing research), direct marketing or advertising (as set forth in this Privacy Policy), network and information security, and fraud prevention;
• Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity;
• Measuring interest and engagement in our Services;
• Developing new products and Services;
• Ensuring internal quality control and safety;
• Authenticating and verifying individual identities;
• Debugging to identify and repair errors or issues with our Services;
• Auditing relating to interactions, transactions, and other compliance activities;
• Processing employment applications if you apply for a job with us;
• Enforcing our agreements, policies, and intellectual property rights; and
• Complying with our legal obligations or otherwise establishing, exercising, or defending legal claims.

C. Aggregate and De-Identified Information

We may aggregate and/or de-identify any information collected so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose we deem appropriate, including without limitation for research and marketing purposes, and may also share such data with any third parties, including advertisers, promotional partners, and sponsors, in our discretion.

‍‍

4. HOW WE DISCLOSE YOUR INFORMATION

We only disclose your information to third parties to assist with the business purposes set forth above.

A. Disclosures to Provide our Services

The categories of third parties with whom we may share your information are described below:

‍Service Providers. We may share your Personal Information with our third-party service providers who are only permitted to use that information to help us provide our Services (each, a “Service Provider”). This includes Service Providers that provide us with IT support, cloud hosting, customer service, analytics, verify your identity, and related services.

‍Business Partners. We may share your Personal Information with business partners to provide you with a product or service you have requested. We may also share your Personal Information to business partners with whom we jointly offer products or services. For example, we may disclose certain of your shipping information to a business partner if you choose to purchase their product to help you fulfill a task, booking, or experience in the Services.

B. Disclosures to Protect Us or Others.

We may access, preserve, and disclose any Personal Information we store that is associated with you to external parties if we, in good faith, believe doing so is required or appropriate to comply with law enforcement or bona fide national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

C. Disclosure in the Event of Merger, Sale, or Other Asset Transfers.

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of service to another provider, your Personal Information may be sold or transferred as part of such a transaction (including in connection with any diligence by any potential transacting party conducted prior to and in connection with such transactions).

D. Other Purposes.

We may also share your Personal Information for other purposes or to other parties as requested by you, as permitted by applicable law, or in any manner you have otherwise consented to.‍

E. Aggregate and De-Identified Information
We may share Aggregate/De-Identified Information with any third party we deem appropriate, including advertisers, promotional partners, and sponsors, in our discretion.

‍‍

5. YOUR PRIVACY CHOICES AND RIGHTS

You may choose not to provide Personal Information. If you choose not to provide Personal Information (or ask us to delete it), we may not be able to provide you with our Services or certain functionality of the Services. We will tell you what information you must provide to receive the Services or to conduct business with us, including by designating it as required at the time of collection or through other appropriate means.

‍

Marketing Emails. If you register for our services, you may receive marketing communications from us or our partners. You can use an “unsubscribe” (or similar) link found at the bottom of a marketing email or text “STOP” (as appropriate) to opt out of receiving future marketing communications. Note that you will continue to receive transactional or administrative emails and SMS texts regarding products or Services.

Google, Facebook, Twitter Advertising. To the extent we use Google, Facebook, or Twitter for advertising purposes on our Services, please see the policies of these respective companies for opt-out purposes. We are not responsible to the extent any such opt outs are not honored by these or companies, as opt-out preferences provided by these companies are not under our control.

‍

“Do Not Track.” Further, you may stop or restrict the placement of third-party cookie technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, please note that cookie-based opt-outs are often not effective on mobile applications. You may opt-out of personalized advertisements on some mobile applications by following the instructions for Android, iOS and others.

More broadly, the online advertising industry also provides websites from which you may opt out of receiving targeted ads from data partners and other advertising partners that participate in self-regulatory programs. You can access these and learn more about targeted advertising and consumer choice and privacy by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada. Please note you must separately opt out in each browser and on each device.

Regardless of your location, you may also manage certain (non-essential) cookies by adjusting your browser settings. Do Not Track (“DNT”) is an optional setting in a web browser that expresses a preference that websites not track your online behavior  elsewhere. We expect our cookie management vendor to respect DNT browser settings for visitors to our Website.

‍‍

6. SECURITY OF YOUR INFORMATION

We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure, and we cannot ensure or warrant the security of any information you provide to us. We have taken commercially reasonable safeguards designed to keep your Personal Information protected and require our Service Providers and partners to have appropriate safeguards as well. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

By using our Services or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Services.

7. YOUR CALIFORNIA PRIVACY RIGHTS

California law may entitle California residents to certain additional protections regarding Personal Information. For purposes of this section alone, “Personal Information”means any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

‍

We collect the categories of Personal Information as described in the “Personal Information We Collect” section above. We collect, use, and disclose Personal Information in the ways described above in this Privacy Policy. We do not sell Personal Information to third parties. California residents have the following rights to the extent granted by applicable law:

• To request and receive information regarding your Personal Information we have collected in the past 12 months (including the categories of Personal Information we have collected, the categories of sources of such information, and the purposes for which we have collected such information);
• To request and receive information about whether we have disclosed your Personal Information to third parties in the past 12 months (and if so, which categories of information we have disclosed, and which categories of third parties we have disclosed it to);
• To request and receive a copy of your Personal Information collected by us in the past 12 months; and
• To request specific treatment relating to the processing of Sensitive Personal Information elements described above.
• Our timely response to your request that your Personal Information be deleted.

‍

We will not discriminate against you if you choose to exercise any of these rights. To make any of the above requests, please contact us as set forth at the end of this Privacy Policy. We may require verification of your identity before further processing your request. In certain instances, we may be permitted by law to decline some or all of such request, including if we determine that our business does not fall within the scope of the California statutes. Please note that if you make unfounded, repetitive, or excessive requests (as determined in our reasonable discretion) to access your Personal Information, you may be charged a fee to the extent permitted by law.

‍

8. INTERNATIONAL DATA TRANSFERS

All information processed by us may be processed and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live. If you use our services, you consent to the transfer of your information from any country to any other country.

‍

9. RETENTION OF PERSONAL INFORMATION

We store the Personal Information we collect as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purposes for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

‍

‍10. CHILDREN’S INFORMATION

The Services are not directed to children under 13. If you are a parent or guardian and believe that your child has provided personal information to us without your consent, you may contact us as described below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it.

‍

11. OTHER PROVISIONS

Third-Party Websites and Applications. The Services may contain links to other websites, mobile applications, or digital properties, including those of our business partners, which you may access either directly, via an authentication process, or otherwise through the Services. Likewise, other websites, mobile applications, or digital properties may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies and terms of service of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications, both within or outside of the Services, is at your own risk.

Changes to our Privacy Policy. We may revise this Privacy Policy from time to time in our sole discretion. We will always post the then-current version of this Privacy Policy on our website. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use our Services after the new Privacy Policy is posted.

‍

12. CONTACT US

If you have any questions about our privacy practices or this Privacy Policy, or to exercise your rights as detailed in this Privacy Policy, please contact us at contact@rolldeep.com.‍