Privacy Policy

1. Who is responsible for your data

Boreal Studio (Ignacio Luque López) is the data controller for information processed through the Rolla website and app. Contact us at borealstudio.agency@gmail.com for any privacy question.

2. What data we collect

Account data: your name, email and, if you sign in with Google, your Google identifier (via Firebase Authentication).

Company data: your company name and the members of your team.

Contacts (leads): the data you or your team enter or scan from third parties — name, job title, company, email, phone, website, LinkedIn and notes.

Business card photos: when you scan a card, the photo is sent to our AI provider (Z.ai) solely to extract the text; we do not store it on our servers once processed.

Digital card (optional): if you enable your NFC/QR card, we store your job title, phone, LinkedIn, website and, if you upload them, your photo or your company logo.

Payment data: handled directly by Stripe; we never store card numbers.

Technical data: IP address, device type and language, for security and to serve the site in your language.

3. What we use your data for

Providing the service: creating your account, storing your contacts, generating your digital card and processing payments.

Communicating with you: team invitations, billing notices and support.

Improving Rolla: understanding aggregate product usage (we never sell or share your data with third parties for advertising).

4. Who we share data with

We rely on a few providers to run Rolla, each with its own privacy policy: Google Firebase (authentication), Stripe (payments), Z.ai (text extraction from scanned cards), Hostinger (email delivery) and IONOS (server hosting). We do not sell your data to anyone.

5. How long we keep your data

For as long as your account is active. If you close your account or request deletion of your company, we delete your personal data within a reasonable time, except where we are legally required to keep it (e.g. billing records).

6. Your rights

If you are in the EU, you have the right to access, rectify, delete, restrict or object to the processing of your data, and to data portability. Email borealstudio.agency@gmail.com and we will respond within a reasonable time. You may also complain to your local data protection authority (in Spain, the AEPD).

7. Security

Passwords are stored encrypted, connections use HTTPS, and access to data is limited to staff who strictly need it.

8. Children

Rolla is a business tool and is not directed at anyone under 16.

9. Changes to this policy

If we make material changes, we will reflect them on this page and update the date above.