Legal

Privacy Policy

Last updated February 24, 2026 · Questions? privacy@roiroute.com

Information We Collect

When you interact with ROIRoute, we may collect:

  • Account Information: Name, email address, business name, and billing details provided during signup.
  • Usage Data: Pages visited, features used, session duration, and interaction patterns — collected server-side.
  • Attribution Data: Ad click IDs (fbclid, gclid, ttclid), referral sources, and conversion events — used to track ad performance via CAPI sendback.
  • Milap Conversations: Conversation data from interactions with our AI qualification system, used to improve lead qualification and generate meeting agendas.
  • Infrastructure Data: AWS resource identifiers and configuration data for customers with deployed infrastructure.

How We Use Your Information

  • To provide, maintain, and improve the ROIRoute platform and managed services.
  • To qualify leads through Milap and generate personalized meeting agendas.
  • To attribute ad spend to real revenue via server-side tracking and CAPI sendback to ad platforms (Meta, Google, TikTok, Snapchat, Pinterest, Twitter).
  • To send transactional emails (payment confirmations, account changes, reports).
  • To monitor platform health and security across your AWS infrastructure.
  • To communicate about your account, service updates, and founding program status.

Data Storage & Security

Your infrastructure data resides in your own AWS account — ROIRoute does not store your business data on our servers. Milap conversation data and ROI attribution data are processed on our managed infrastructure with enterprise-grade security: KMS encryption at rest, WAFv2 protection, 3-tier VPC architecture, and GuardDuty threat detection.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Third-Party Services

  • AWS: Infrastructure hosting for both customer deployments and our managed services.
  • Stripe: Payment processing — we do not store credit card numbers.
  • Ad Platforms: Conversion data is sent to Meta, Google, TikTok, Snapchat, Pinterest, and Twitter via their respective server-side APIs for ad optimization.
  • AI Providers: Sathi routes requests to multiple AI providers (OpenAI, Anthropic, Google, etc.) — conversation data is processed per each provider's terms.

Your Rights

You have the right to:

  • Access, correct, or delete your personal data.
  • Opt out of analytics and attribution cookies (essential cookies cannot be disabled).
  • Export your data at any time.
  • Cancel your service — your AWS infrastructure remains yours.

To exercise any of these rights, contact privacy@roiroute.com.