Privacy Policy — Rooler Business

Effective date: November 1, 2026

Last updated: November 4, 2026

This Privacy Policy explains how Invest Tech System LLC ("Rooler", "we", "us") collects, uses and shares information when you use the Rooler Business mobile application for iOS and Android (the "App").

The App is a business tool for trucking companies. It shows your company's financial and operational analytics and carrier safety records, and gives you an AI assistant you can talk to by text or voice.

The Rooler website and TMS web application are covered by our platform Privacy Policy.

Who controls your data

Business data. The company that sets up Rooler and creates accounts for its staff (your "Company") controls its business data, such as loads, drivers, trucks, customers and accounting. We process that data on the Company's behalf, under our service agreement with it. Questions about how your Company uses that data should go to your Company.
Account and usage data. For the account and usage data we collect to run the App, Invest Tech System LLC is the controller.

Information we collect

Information you give us

Account information. Your name, email address, profile picture and the Company you belong to. Accounts cannot be created in the App: your Company's dispatcher or manager creates your account in the Rooler TMS web application. Sign-in is provided by our authentication provider, WorkOS.
Profile information. Your phone number and profile photo. A secondary phone number and date of birth can also be stored; both are optional and the App does not ask for them. Your settings, such as time zone, notification preferences, AI voice and answer detail.
Security information. Two-factor authentication (TOTP) enrollment, and your active sessions, including the IP address and device type of each session. Your password is handled by our authentication provider.
AI assistant content. The messages you type, the files and photos you attach (up to 20 MB each), your feedback on answers (thumbs up or down), and the conversations themselves.
Voice. When you start a voice conversation, your microphone audio is streamed in real time so the assistant can hear you and answer. What you say is transcribed, and the transcript is saved to the same conversation, so it appears in your chat history. Depending on the voice service used for the call, the audio of the call may also be recorded and stored (see "Service providers").
Watchlist notes. Carriers you add to your watchlist and any notes you write about them.
Reports. When you report a problem or an AI answer: what you write, the reason you choose, the screen you were on, and any screenshots or videos you attach (up to 25 MB each).

Information from your Company

The App shows data your Company holds in Rooler: profit and loss, revenue, costs, cash flow, factoring, invoice aging and reserves; loads, customers, trucks, fuel and tolls; and driver names, truck numbers and per-driver profit and loss.

Information from connected apps

If you connect a third-party service ("Integration"), we receive the data you authorize so the AI assistant can read it and, with your approval, act on it. Integrations available today:

Google Calendar: your calendars and events.
Google Sheets: the spreadsheets you allow.
Gmail and Outlook email, through Nylas: your mailbox, including messages and contacts, and sending email on your behalf.
Outlook: your calendar and events.
QuickBooks: your Company's accounting records.
Telegram: messages and the minimal account metadata needed to connect.

You choose which Integrations to connect, and you can disconnect them at any time in Settings → Integrations. See "Google user data" for how we handle data from Google.

Public records

Carrier safety information — authority, inspections, violations, crashes, insurance and equipment — comes from public U.S. Department of Transportation / FMCSA records.

Information collected automatically

Device information: device model, operating system version, app version and build, an identifier generated by the App, a push notification token, and IP address.
Approximate location: the city and country we derive from your IP address, used for analytics. This is not your device's location.
Usage information: which screens you open (including identifiers that appear in the screen address, such as a carrier's DOT number or a conversation ID), and when the App is opened, backgrounded, installed or updated.
Diagnostics: crash reports, error reports and technical logs.
Session replay: we record how the App is used so we can fix bugs and improve the product. The content of every screen is masked in these recordings: they show which screens you open, your taps and scrolling, and the App's technical logs, but not your names, amounts, messages, images or anything you type. Recordings are used only by our team and are never sold or shared for advertising.

What we do not collect

The App does not access your device's location (GPS or network location), or the contacts or calendar on your device. We do not use advertising identifiers and we do not show ads.

Device permissions

The App asks for each permission only when you use the feature that needs it. You can change permissions at any time in your device settings.

Microphone: voice conversations with the AI assistant.
Camera: taking a profile photo, or a photo to attach to an AI chat message.
Photos and files: choosing a profile photo, or attaching images and documents to an AI chat message.
Notifications: alerts and updates about your account and the assistant's work.
Bluetooth and audio settings: routing voice-conversation audio to headsets and speakers.

How we use information

We use information to:

provide the App: sign you in, show your Company's data, run the AI assistant and voice conversations, and carry out actions you approve;
keep accounts secure: two-factor authentication, session management and fraud prevention;
send notifications you have enabled, and respond to your messages;
diagnose crashes and errors, and improve the App's reliability and design;
understand how features are used, so we can improve them;
monitor and improve the quality of AI answers, using the feedback you give;
comply with legal obligations and enforce our terms.

AI and model training. We do not use your conversations, attachments, transcripts, business data or Integration data to train or fine-tune AI models. Our AI requests go through OpenRouter with training on prompts disabled and zero data retention enabled, so they are sent only to AI providers that do not train on them or keep them after answering.

AI actions need your approval. The assistant can propose actions such as sending an email, placing a phone call or changing data in a connected app. It carries them out only after you approve, or under a standing approval you have given. You can revoke standing approvals in Profile → AI tool permissions.

Service providers

We share information with service providers that help us run the App. They may use it only to provide their service to us.

Railway (USA, us-east-1) hosts our application, database and server logs.
Amazon Web Services (USA, us-east-2) stores files, such as chat attachments and voice recordings.
WorkOS provides sign-in and session management. It receives your name, email, profile picture, organization and sign-in events.
OpenRouter, and the AI model it routes a request to (DeepSeek by default; OpenAI, Anthropic or Google models when selected), generate AI answers. They receive your messages, attachments and transcripts, and the parts of your business or Integration data needed to answer.
Langfuse monitors the quality of AI answers. It runs on our own hosted instance and receives conversation content and your feedback, used only by our team.
LiveKit and Vapi (with Daily) run real-time voice conversations. They receive microphone audio and transcripts. Calls through Vapi may be recorded and stored at Vapi or in our AWS storage.
Deepgram provides speech-to-text and the assistant's voice. It receives audio and transcripts.
ElevenLabs and Cartesia provide the assistant's voice. They receive the text of the assistant's replies.
OpenAI provides real-time voice, only when that voice mode is turned on. It receives audio and transcripts.
PostHog (USA) provides product analytics, error tracking and session replay. It receives your user ID, name and email, device and usage information (including your IP address, from which it derives an approximate location), diagnostics and masked session recordings.
Google Firebase Cloud Messaging and the Apple Push Notification service deliver push notifications. They receive your push token and the notification content.
Novu runs the notification inbox and notification delivery. It receives your user ID, push token and notification content.
Nango and Nylas connect Integrations and mailboxes. They receive authorization tokens and the data you allow access to.
Mapbox draws the maps on carrier safety records. It receives map requests and technical device information.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only:

with the service providers listed above;
within your Company: other users in your Company may see Company data and activity according to their role;
with connected Integrations, when you ask the assistant to act there and approve the action;
if required by law, or to protect the rights, safety and property of Rooler, our users or others;
as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

Google user data

Rooler Business's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access. If you connect your Google account, we access the Google data you connect: your Gmail mailbox (messages, contacts, and sending email on your behalf), Google Calendar and Google Sheets. We access only what you allow on Google's consent screen.
How we use it. Only to provide the features you ask for, such as showing your calendar, reading a sheet or drafting an email when you ask the AI assistant about it.
AI providers. When you ask the AI assistant about your Google data, the relevant part is sent to our AI providers to answer your request. It is not used to train or improve AI models, ours or theirs.
No selling or advertising. We do not sell Google user data and we do not use it for advertising. We do not let people read it, except with your permission, for security, or to comply with the law.
Disconnecting and deletion. You can disconnect your Google account at any time in Settings → Integrations, and ask us to delete your Google data at any time.

Data retention

Account and profile data, AI conversations, attachments, transcripts and voice recordings: kept until you or your Company ask us to delete them (see "Deleting your data and account").
Session recordings: 30 days.
Analytics events and error reports: up to 7 years. When your account is deleted, we also delete your analytics profile and the events linked to it.
Server logs: 30 days.
Backups: 30 days. Deleted data stays in backups until they expire.

Some information may be kept longer where the law requires it or to resolve disputes.

On your device, the App keeps your sign-in session in encrypted secure storage and keeps recently loaded data so it opens quickly. Signing out deletes the stored session and this cached data.

Deleting your data and account

In the App you can delete individual AI conversations and messages, remove your profile photo, disconnect Integrations, remove two-factor devices and sign out of other sessions.
To delete your account and personal data, follow the steps on How to delete your account, or ask your Company's administrator to request it. We complete the deletion within 30 days, except for information we must keep by law.
Business data belongs to your Company and is deleted at the Company's request.

Security

We protect information with encryption in transit (HTTPS/TLS), encrypted storage of sign-in tokens on your device, two-factor authentication, and access controls that limit data to authorized personnel. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have the right to:

know what personal information we hold about you and get a copy;
correct inaccurate information;
delete your information;
export your information;
object to or restrict certain processing;
withdraw consent you have given;
not be discriminated against for exercising these rights.

California residents. Under the CCPA/CPRA you have the rights above. In the last 12 months we collected the categories described in "Information we collect": identifiers, professional and commercial information, internet and device activity, and audio recordings. We do not sell or share personal information as those terms are defined in that law.

Your choices:

notifications: turn them off in Profile → Settings or in your device settings;
device permissions: change them in your device settings;
Integrations: disconnect them in Settings → Integrations;
analytics and session replay: email us at info@rooler.ai to opt out.

To exercise any right, email info@rooler.ai. We may need to verify your identity first. If your request concerns your Company's business data, we may refer you to your Company.

International transfers

Rooler is operated from Uzbekistan and serves companies in several countries. Our servers are in the United States: the application and database on Railway (us-east-1), and file storage on Amazon Web Services (us-east-2). Your information may therefore be transferred to and processed in countries other than your own, including the United States and Uzbekistan. Rooler does not currently offer its services to users in the European Union.

Children

The App is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for significant changes, notify you in the App or by email.

Contact us

Invest Tech System LLC
Shahriobod MFY, Oliy Himmat street 128
Tashkent 100006, Uzbekistan
D-U-N-S: 933907173
Email: info@rooler.ai