Privacy Policy | Rollee's Commitment to Data Protection

At ROLLEE, respecting your privacy and protecting your personal data are our priority.

This privacy policy (hereinafter the “Privacy Policy”) is intended to inform you of how your personal data are processed when you use the website www.getrollee.com (the “Site”) and, to a certain extent, the ROLLEE tool (the “Solution”), in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended, and any other personal data protection legislation applicable depending on your country of residence (together, the “Applicable Regulations”).

This Privacy Policy does not describe how your data are collected and processed through cookies and other trackers (“Cookies”) on the Site. For more information, please refer to our Cookie Policy.

1. Who is the data controller?

When you browse and/or register on our Site, in the context of managing our contractual relationship with you, and when you use our Earnings IQ mobile application, the data controller is ROLLEE, a French simplified joint-stock company (société par actions simplifiée) registered with the Orléans Trade and Companies Register under number 899 520 084, whose registered office is located at 1 avenue du Champs de Mars, 45100 Orléans, France (“We”, “Us”, “Our”).

The Earnings IQ application allows its users to connect their accounts on work platforms such as Uber, Bolt or iFood (the “Platforms”) in order to obtain a report on their activity and income.

However, when our services are used by client companies to enable you to use the Solution (the “Companies”), we collect and process personal data in their name and on their behalf. The Companies are therefore the data controllers and we act as a processor. For any question relating to the processing of your personal data in this context, please refer to the privacy policy of the Company acting as data controller.

2. What data do we collect?

Personal data are data that make it possible to identify an individual, either directly or by cross-referencing with other data.

We collect personal data falling into the following categories:

Identification data (last name, first name, email and postal address, telephone number);
Data relating to your professional life (company name, CV, position/job title, LinkedIn URL);
Data relating to the contractual relationship;
Connection data (connection logs, as well as the login credentials and passwords of your accounts on the Platforms, which are stored in encrypted form);
If you choose to log in using a third-party authentication service, certain data such as your name and email address may be retrieved from that service. By choosing this option, you agree that the service will share these data with us. We do not collect the password of your third-party account;
Browsing data (IP address, pages viewed, date and time of connection, browser used, operating system, user ID, MAID);
Economic and financial data (income generated in the course of your activity);
Data relating to your activity on the Platforms (profile information, history of rides or deliveries completed, bonuses, income, location data);
Any information you choose to send us as part of your contact request.

Mandatory data are indicated when you provide us with your data. They are flagged by any appropriate means.

3. How do we collect your personal data?

We may collect your personal data in two ways:

directly, when you provide them to us (for example, by filling in a contact form on our Site or by using our Solution);
indirectly, from the Platforms to which you connect your accounts, either in the Earnings IQ application or at the request of a Company, in which case we act on behalf of that Company.

4. Details of the processing of your personal data

Purposes	Legal bases	Retention periods
Providing the services of the Earnings IQ application	Performance of the contract you have entered into with Us (our Terms of Use)	Your data are retained for the entire duration of our contractual relationship with you. Your connection logs are retained for 6 months. In addition, your data may be archived for evidentiary purposes for a period of 5 years.
Carrying out operations relating to the management of our clients and monitoring our business relationship with our clients	Performance of the contract that you or your company have entered into with Us (our SaaS licence agreement, or our Terms of Use in connection with the Earnings IQ application)	Personal data are retained for the entire duration of the contractual relationship. Your connection logs are retained for 6 months. In addition, your data (with the exception of your bank details) may be archived for evidentiary purposes for a period of 5 years.
Anonymising your data, including data collected on behalf of a Company where that Company authorises us to do so, in order to produce aggregated statistics on income and activity	Our legitimate interest in developing statistical studies and products	Personal data are processed until they are anonymised. Once anonymised, your data are no longer considered personal data, as no re-identification is possible. They are retained for as long as necessary.
Analysing your use of the services, understanding your expectations and improving the features offered (in particular by producing browsing and audience statistics for the Site, the Solution and the Earnings IQ application)	Our legitimate interest in improving our services	The lifespan of trackers and cookies is 13 months. Personal data collected through these trackers and cookies are retained for a maximum of 25 months. Once anonymised, your data are no longer considered personal data, as no re-identification is possible. They are retained for as long as necessary.
Managing your reviews of our services	Our legitimate interest in collecting your opinion on our services	2 years from the publication of the review
Building a prospect database	Our legitimate interest in developing and promoting our business	Your data are retained for 3 years from your last contact with us.
Sending newsletters, solicitations and promotional messages by email	Our legitimate interest in retaining and informing our clients, users and prospects about our latest news and our services. You may object to this at any time, in particular via the unsubscribe link included in each message.	Data are retained for 3 years from your last contact with us.
Responding to your requests for information, contact and/or demonstrations	Our legitimate interest in responding to your requests	Data are retained for 3 years from your last contact.
Retaining administrative information and documents relating to our business	Compliance with our legal and regulatory obligations	Invoices are archived for 10 years. Data relating to your transactions (with the exception of bank details) are retained for 5 years. Data relating to your contract and to the signature of the contract are retained for 5 years.
Processing applications and managing the recruitment process (pre-selection of candidates, contacting candidates to assess their ability to fill the position, conducting interviews, finalising the recruitment process)	Performance of pre-contractual measures taken at your request	Your data are kept in an active database for the entire duration of the recruitment process until the hiring decision. If your application is unsuccessful, your data may be retained for 3 months after the end of the recruitment process so that we can explain the reasons why your application was rejected. Your data may be kept in intermediate storage for evidentiary purposes for 5 years from the date of the hiring decision.
Building a CV database	Your consent	Data are retained for 2 years from the last contact with the data subject.
Responding to requests from data subjects to exercise their rights	Compliance with our legal and regulatory obligations	If we ask you for proof of identity, we retain it only for as long as necessary to verify your identity. Once verified, the proof of identity is deleted. If you exercise your right to object to receiving marketing communications, we retain this information for 3 years.

5. Who are the recipients of your data?

The following will have access to your personal data:

Our company’s staff;
Our processors: hosting provider, newsletter service provider, IT service providers, audience measurement and analytics provider, email service provider, secure payment provider, invoicing tool, cookie management tool, customer relationship management (CRM) tool, chat support tool on the Site;
Any authority legally entitled to access them, in particular judicial, police or administrative authorities, upon request.

6. Are your data likely to be transferred outside the European Union?

Data collected through the Solution and the Earnings IQ application are retained and stored for the entire duration of the processing on the servers of Amazon Web Services (AWS), located in France. The Site and the data submitted through its forms are hosted by Webflow, Inc., established in the United States.

In connection with the tools we use (see the section on recipients regarding our processors), your data may be transferred outside the European Union. Such transfers are secured by the following means:

either the data are transferred to a country that is the subject of an adequacy decision by the European Commission, in accordance with Article 45 of the GDPR: in this case, that country ensures a level of protection deemed sufficient and adequate under the GDPR;
or the data are transferred to a country whose level of data protection has not been recognised as adequate under the GDPR: in this case, the transfers are based on appropriate safeguards referred to in Article 46 of the GDPR, adapted to each provider, including, without limitation, the conclusion of standard contractual clauses approved by the European Commission, the application of binding corporate rules or an approved certification mechanism;
or the data are transferred on the basis of one of the appropriate safeguards described in Chapter V of the GDPR.

For information purposes, our main providers likely to process your data outside the European Union are Webflow, Inc. (hosting of the Site and its forms), Kommo (customer relationship management tool) and Intercom (chat support tool on the Site).

You may obtain a copy of the instruments governing the transfer of your data outside the European Union by contacting us using the details provided in the section “What are your rights over your data?” below.

7. What are your rights over your data?

You have the following rights with regard to your personal data:

Right to information: this is precisely why we have drafted this Privacy Policy. This right is provided for in Articles 13 and 14 of the GDPR.
Right of access: you have the right to access all of your personal data at any time, pursuant to Article 15 of the GDPR.
Right to rectification: you have the right to rectify your inaccurate, incomplete or outdated personal data at any time, in accordance with Article 16 of the GDPR.
Right to restriction: you have the right to obtain the restriction of the processing of your personal data in certain cases defined in Article 18 of the GDPR.
Right to erasure: you have the right to require that your personal data be erased and to prohibit any future collection, on the grounds set out in Article 17 of the GDPR.
Right to set out instructions regarding the retention, erasure and communication of your personal data after your death.
Right to withdraw your consent at any time: for purposes based on consent, Article 7 of the GDPR provides that you may withdraw your consent at any time. Such withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to data portability: under certain conditions set out in Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a standard machine-readable format and to request that they be transferred to the recipient of your choice.
Right to object: pursuant to Article 21 of the GDPR, you have the right to object to the processing of your personal data. Please note, however, that we may continue to process your data despite your objection where there are compelling legitimate grounds, or for the establishment, exercise or defence of legal claims. Where your data are processed for direct marketing purposes, you may object at any time, without having to justify your request.

Depending on your country of residence, you may have additional rights under applicable local legislation, which you may exercise in the same manner.

You may exercise these rights by writing to us at data@getrollee.com or by post at 1 avenue du Champs de Mars, 45100 Orléans, France.

ROLLEE has appointed a Data Protection Officer (DPO), who can be contacted at data@getrollee.com.

We may ask you to provide additional information in the event of reasonable doubt, or any document likely to prove your identity if the doubt persists.

For any question or request that has remained unresolved, you are entitled to lodge a complaint with the competent supervisory authority of your country of residence; in France, this is the Commission Nationale de l’Informatique et des Libertés (“CNIL”), 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07.

8. Changes

We may amend this Privacy Policy at any time, in particular to comply with any regulatory, case-law, editorial or technical developments. These amendments will apply from the effective date of the amended version. You are therefore invited to regularly consult the latest version of this policy. However, we will inform you of any significant change to this Privacy Policy.

In the event of any discrepancy between this English version and the French version of this Privacy Policy, the French version shall prevail.

Effective date: 09/2026