Privacy Policy

This policy explains what information ROI collects, what we do with it, who we share it with, and the choices you have. It covers our website at itsroi.com and the ROI app.

ROI is run by Return On Influence, Inc. ("ROI", "we" or "us"). If you have a question about this policy or your information, email us at [email protected].

The short version

• We only read your social and store accounts if you connect them, and we use what we read to work out what your audience is likely to buy.
• We use AI to write your product plans. Our AI provider's commercial terms don't allow it to train its models on your information.
• We don't sell your information, and we don't use advertising or analytics trackers.
• You can disconnect an account or ask us to delete your information at any time.

Information we collect

When you join the waitlist

• Your first and last name and your email address.
• What you tell us about yourself: how you'd describe what you do, whether you've sold products before, your social handle and any referral code.
• Whether you'd like early access updates and ROI news. We only send news if you tick the box.
• How you found us: the campaign tags on the link you followed, and the website that sent you, if your browser shares it.

When you have an account

ROI is invite-only, so our team creates your account. Logins are handled by Auth0, our login provider. When you log in, we receive your email address and an account ID from Auth0, or from Google if you log in with Google. We never see your password.

In the app, you give your creator profile a name and, if you like, a handle. When you place an order, we keep what you tell us about it: the product, quantities and options, target date and notes, and each update on its progress.

When you connect an account

You choose which accounts to connect, and each platform asks for your permission before we can read anything. This is what we read from each one:

Account	What we read
Instagram	Your profile (username, name, bio, website, and follower and post counts); your 30 most recent posts (captions, type, likes, comments and dates); and your audience's age ranges, genders, cities and countries, as totals.
YouTube	Your channel's details and statistics; your 30 most recent videos (titles, the start of each description, and views, likes and comments); and your viewers' age ranges, genders and top countries over the last 90 days, as totals.
TikTok	Your profile and its statistics, and your 20 most recent videos with their descriptions and counts.
X	Your profile and its public counts, and your 30 most recent posts (not replies or reposts) with their counts.
Twitch	Your channel, follower count, emotes, clips from the last six months, stream schedule and recent broadcasts, and your subscriber and Bits totals.
Shopify	Your store's orders, products, inventory and locations. We don't ask for access to your customer records.
ShopMy	The export file you upload. We keep the brand, product, price, clicks, conversions, commission and dates from it, and discard the other columns.
Ticketmaster	The artist page you choose, and your upcoming shows, which are public.

To read these accounts, we keep the access keys each platform gives us, encrypted.

We read your accounts when you connect them and each time ROI analyzes them. We don't keep a full copy of what we read. We keep a summary of what each analysis was based on (your profile, posting patterns, recent captions, follower counts and summaries of your store, affiliate sales and shows) and the plans it produced.

Information about other people

Some of what platforms send us is about your fans or customers. Twitch tells us who subscribed and who sent Bits, and Shopify orders can include details about the buyer. We use this only to work out totals, and we don't keep anyone's name or contact details from it. The titles of your Twitch clips, which fans may have written, are part of what an analysis reads.

Collected automatically

• Cookies. A few small files that keep you logged in and remember your settings. See Cookies.
• Server logs. Like most websites, our servers record the requests they receive, including your IP address, your browser type and the pages you ask for. We use them to keep ROI running and secure.

We don't use analytics, advertising or tracking tools.

How we use your information

• To run ROI for you: reading your connected accounts, working out what your audience is likely to buy, and writing product and launch plans.
• To make what you order: planning, producing and delivering your products with our manufacturing partners.
• To run the waitlist: choosing who to invite next, and telling you when it's your turn.
• To send you news, only if you asked for it. You can stop at any time.
• To support you, including when our team works in your account. See When our team uses your account.
• To keep ROI secure, prevent misuse and fix problems.
• To improve ROI, including how well it predicts what will sell.
• To meet our legal obligations.

Our legal bases (EEA and UK)

If you're in the European Economic Area or the UK, we rely on these legal bases:

• Contract: to provide ROI and make your orders.
• Consent: to read the accounts you connect and to send you news. You can withdraw consent at any time, without affecting what we did before.
• Legitimate interests: to run the waitlist, keep ROI secure and improve it, where those interests aren't outweighed by your rights.
• Legal obligation: where the law requires us to keep or share information.

How we use AI

ROI uses Anthropic's Claude to write your product plans. When ROI analyzes your accounts, we send Anthropic what we read from them: your profile, recent posts and captions, audience totals, and summaries of your store, affiliate sales and upcoming shows. Anthropic processes this to produce the plan for us. Anthropic's commercial terms don't allow it to train its models on this data.

We don't use the information we read from your connected accounts to train AI models.

Plans can mention people who appear in your content, for example as someone to send a free product to. Plans are predictions, not promises. See our Terms of Service.

Who we share information with

• Service providers that run parts of ROI for us, under contracts that limit what they can do with your information:
  • Railway, which hosts our servers and database in the United States;
  • Auth0 (part of Okta), which handles logins;
  • Anthropic, which provides the AI that writes plans;
  • Amazon Web Services, which stores images you attach to an analysis;
  • Sentry, which records errors in the app so we can fix them.
• The platforms you connect. When we read your account, the platform sees our requests. Its own privacy policy covers what it does with them.
• Manufacturing and delivery partners, when you place an order. We share only what they need to make and deliver it, such as product details, quantities, your designs and brand materials, and delivery details.
• Ticketmaster, when you search for your artist page. Your search goes to Ticketmaster, and artist images load from Ticketmaster's servers.
• Others, if the law requires it, or to protect ROI, our users or the public.
• A buyer or successor, if ROI is involved in a merger, acquisition or sale of assets. This policy would still protect your information.

We don't sell your personal information, and we don't share it for targeted advertising.

We may combine information from many creators, with names and accounts removed, to improve how ROI predicts demand. We only include a creator's results where our agreement with them allows it, and never in a way that identifies a creator or shows one creator's results to another. Information from Google is never used this way.

When our team uses your account

Authorized ROI staff can see account details and orders so they can run the service and make your products.

To support you, a staff member can also open your account and use ROI as you would, for up to 30 minutes at a time. They do this only when you've asked for help or asked us to do something for you, to keep ROI secure, or where the law requires. They can't connect accounts on your behalf.

Every one of these sessions is recorded: who opened it, when, and everything they looked at or changed, including what they submitted. We keep that record for 2 years.

YouTube and Google

ROI uses YouTube API Services. If you connect YouTube:

• you agree to be bound by the YouTube Terms of Service;
• the Google Privacy Policy covers how Google handles your information;
• you can remove ROI's access at any time on your Google security settings page.

ROI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We refresh or delete information we got from YouTube within 30 days, apart from YouTube Analytics data, and we check at least every 30 days that you still allow ROI to access your account. If you disconnect YouTube in ROI, we delete what we got from it within 7 days. If you remove our access through Google instead, we delete it within 30 days.

How long we keep information

• Your account, profile and orders: while your account is open. When you close it, we delete them within 30 days, except records the law requires us to keep, such as order and payment records, which we keep for 7 years.
• Information from connected accounts: the summaries and plans described above, while your account is open. When you disconnect an account, we delete its access keys and what we got from it within 7 days. YouTube has extra limits, described in YouTube and Google.
• Waitlist details: until you're invited or ask to be removed, and for no more than 24 months.
• Server logs: up to 30 days.
• Records of staff using your account: 2 years.

Your choices and rights

• Disconnect an account on the Accounts page in ROI. You can also remove ROI's access in the platform's own settings. See Deleting your data.
• Stop news emails with the unsubscribe link in any email, or by writing to us.
• See, correct, download or delete your information by emailing [email protected]. We'll reply within 30 days, and we may need to confirm it's you first.

Depending on where you live, including the EEA, the UK, California and other US states, you may also have the right to object to or restrict how we use your information, to withdraw consent, to appeal a decision we make about your request, and to complain to your data protection authority. We won't treat you differently for using any of these rights.

We don't sell or share personal information as California law defines those terms, and we don't use sensitive personal information for anything beyond providing ROI.

Deleting your data

To delete the information ROI got from a connected account, including Facebook and Instagram, do any one of these:

1. In ROI, open Accounts and disconnect the account.
2. Remove ROI in the platform's settings:
   • Facebook: Settings & privacy > Settings > Business integrations.
   • Instagram: Settings > Apps and websites.
   • YouTube: your Google security settings page.
   • TikTok, X and Twitch: the list of connected apps in your account settings.
   • Shopify: uninstall ROI from the Apps page in your Shopify admin.
3. Email [email protected] with the subject "Delete my data", and tell us which accounts.

We delete the information within 7 days and email you when it's done.

To close your ROI account and delete everything in it, email us. We'll do it within 30 days, apart from records the law requires us to keep.

How we protect information

• Everything sent between your browser and ROI is encrypted.
• The access keys for your connected accounts are encrypted when stored (AES-256).
• Only staff who need it can see your information, and every time staff use your account it's recorded.

No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

Where we store information

ROI stores information in the United States. If you're outside the US, your information is transferred there. Where the law requires it, we protect those transfers with the European Commission's Standard Contractual Clauses and, for the UK, the UK's addendum to them.

Children

ROI is for adults running a creator business. It isn't meant for anyone under 18. If we learn we've collected information from a child, we'll delete it.

Cookies

ROI uses only the cookies it needs to work:

Cookie	What it's for	How long it lasts
__session	Keeps you logged in. Set by our login provider.	Up to 3 days
__txn_ cookies	Used while you log in.	Until you've logged in
roi-theme	Remembers whether you chose light or dark mode.	1 year
roi-view-as	Used only by ROI staff, while they're using a creator's account.	Up to 30 minutes

We don't use cookies for analytics or advertising.

Changes to this policy

When we change this policy, we'll post the new version here and update the date at the top. If a change affects you significantly, we'll tell you by email or in the app before it takes effect.

Contact us

Return On Influence, Inc.
16192 Coastal Highway, Lewes, Delaware 19958
[email protected]