Privacy Policy
This Privacy Policy explains how Rolvue ("Rolvue", "we", "us") collects, uses, and protects personal data when you use our website and application (the "Service"). We process data in line with the EU General Data Protection Regulation (GDPR) and applicable local law.
1. Who we are
The data controller is da configurare, registered at da configurare, VAT/company number da configurare. Privacy requests can be sent to contatto da configurare or submitted through the Support page.
2. Data we collect
- Account & identity — email address, canonicalised email used for anti-abuse checks, name, verification events and account status. We use password-free magic links and store only hashed, expiring tokens.
- Profile you build — university, programme, target sectors, Milano preferences, seniority, languages, and preferences you enter during onboarding.
- Usage data — roles you track, contacts you unlock, filters, and in-app activity needed to run your tracker and alerts.
- Alert channels — verified email, Telegram chat identifier, WhatsApp number and push token only when you connect those channels. Availability depends on your plan.
- Contact Database — business contact records returned by Hunter, the bank and role, records you unlock, credit balance and credit ledger. Personal contact fields remain withheld from your account until you unlock that record.
- Payments — plan and purchase records. Card details are handled directly by our payment processor; we never see or store full card numbers.
- Support & communications — messages you send us (including via WhatsApp or email) and their content.
- Technical data — device, browser, and cookies as described in our Cookie Policy.
3. How we use your data
- Provide, personalise, and secure the Service (database access, tracker, alerts).
- Match live roles to your profile and deliver notifications you request.
- Process payments and manage your plan.
- Respond to support requests.
- Maintain, improve, and analyse the Service in aggregate.
- Meet legal, accounting, and security obligations.
We do not sell your personal data.
4. Legal bases (GDPR Art. 6)
- Performance of a contract — to provide the Service you sign up for.
- Consent — for optional analytics cookies and, where applicable, marketing. You can withdraw consent at any time.
- Legitimate interests — to secure, maintain, and improve the Service, balanced against your rights.
- Legal obligation — for tax, accounting, and compliance.
6. International transfers
Some providers may process data outside the European Economic Area. Where this happens, we rely on adequacy decisions or Standard Contractual Clauses to protect your data.
7. How long we keep data
We keep account and product data while the account is active, billing records for the statutory tax/accounting period, security and audit logs only as long as necessary for abuse prevention, and cached Hunter records while the related bank remains monitored or until refreshed/deleted. Unlocked-contact history is retained to preserve the purchased entitlement. You can request deletion, subject to legal retention duties.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, to object to certain processing, and to withdraw consent. Submit requests through Support. You may also complain to your local supervisory authority (in Italy, the Garante per la protezione dei dati personali).
9. Security
We use encryption in transit, access controls, signed Stripe webhooks, expiring password-free email links, hashed verification tokens, server-side Hunter credentials and minimised API responses for locked contacts. No transmission method is completely secure.
10. Age
The Service is intended for university students and professionals aged 18 or over. We do not knowingly collect data from children under 16.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in-app.
12. Contact
Questions or privacy requests can be sent to contatto da configurare or submitted through the Support page.