Privacy Policy

Last updated August 24, 2026.

1. Information We Collect

We collect information you provide directly (business name, contact details, payment information) and information generated by your use of the platform (orders, contacts, content, usage logs).

2. How We Use Information

We use collected information to operate the platform, provide features you've configured (email/SMS delivery, shipping, payments), and to improve the service. We do not sell your data.

3. Tenant Data

Your business data — contacts, orders, products, and content — is treated as tenant data. It is scoped to your account and is not shared with other tenants.

4. Third-Party Services

Roots HQ connects to third-party services (Stripe, PayPal, Square, EasyPost, AWS SES, Twilio, Instagram, Facebook, Anthropic, OpenAI) to provide features. Each has its own privacy policy. We only share data with these services to the extent required to deliver the feature you're using.

5. Cookies and Tracking

The platform uses session cookies for authentication. The marketing site may use minimal cookies for analytics. We do not use advertising tracking.

6. Data Retention

We retain your data while your account is active. On account closure, data is retained for a reasonable period before deletion, unless you request earlier deletion.

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete your data. Contact us to exercise these rights.

8. Security

We use encryption, access controls, and tenant isolation measures designed to protect your data. See our Security page for details.

9. Changes to This Policy

We may update this policy. We will notify active tenants of material changes.

10. Contact

Privacy questions: privacy@roots-hq.com