Trust

Privacy and security by design

How Roocation is designed to handle your information — with production-dependent claims clearly labelled as requirements, not current guarantees.

Draft for legal review. This is a plain-language draft based on current material and has not been legally reviewed or approved. Final wording is confirmed before launch.

This page describes how Roocation is designed to handle your information — privacy and security by design. Statements that depend on production infrastructure are labelled as production requirements, not current guarantees. For the full detail, see our privacy policy, or use contact with any privacy question.

What Roocation collects

Account details you provide (such as your name and email), the locations and business types you analyse, and the reports and preferences saved to your account.

What it does not collect

Roocation does not collect your internal sales, financials, staff or point-of-sale data. Reports describe external location conditions only — the world around an address, never what happens inside your business.

Payments

Card details are handled by a third-party payment provider. Roocation is designed not to store full card numbers.

Production requirement. The specific payment provider and its configuration are confirmed in production.

Access controls

Access to customer data is intended to be limited to what is needed to operate the service.

Production requirement. The operational access-control policy and audit logging are finalised in production.

Storage, retention and deletion

You can request a copy of your data or account deletion from Profile → Privacy & data.

Production requirement. Retention periods, storage location and the deletion process are finalised in production.
Not claimed by this prototype. This prototype does not claim encryption-at-rest, a specific hosting location, security certification or a defined breach-response time — those are production requirements pending verification, not current guarantees.

Subprocessors

A list of data subprocessors (for example, hosting, payments and mapping providers) will be published here once contracts are confirmed.

Subprocessor list — pending production. The confirmed list of subprocessors is published here once production contracts are in place.

Your data rights and contact

You can access, correct or delete your data, subject to the privacy policy. For privacy questions or incidents, use contact or email hello@roocation.com.

Roocation's approach is being aligned with the Privacy Act 1988 (Cth), the Australian Privacy Principles and the Notifiable Data Breaches scheme, subject to professional review — see the privacy policy.