Privacy Policy

Roll Ready ("we," "us," or "our") operates the Roll Ready mobile application and website at roll-ready.com (together, the "Service"). This Privacy Policy describes what information we collect, how we use it, who we share it with, and what rights you have as a user.

By creating an account or using the Service, you agree to the collection and use of your information as described in this policy. If you do not agree, please discontinue use of the Service.

1. Information We Collect

Account Information

When you register for Roll Ready, we collect information needed to create and manage your account, including:

• Full name and email address
• Company name and business details
• Account type (admin or driver)
• Password (stored as a salted hash — we never store plain-text passwords)

Vehicle and Fleet Information

To facilitate daily inspections, we collect information about the commercial vehicles and trailers in your fleet, including:

• Vehicle make, model, and year
• Unit numbers and plate numbers
• Plate jurisdiction (province/state)
• Vehicle type (power unit or trailer)

Inspection Reports and Defect Data

The core function of Roll Ready is recording daily vehicle inspections. We store:

• Completed Schedule 1 inspection checklists
• Defect descriptions and classifications (minor or major)
• Defect photographs taken in the app
• Driver electronic signatures
• Inspection timestamps, vehicle odometer readings, and trip type (pre-trip or post-trip)

Driver Profiles

Driver accounts include name, email address, and account role. Admins may associate drivers with specific vehicles or inspection records.

Usage and Device Information

We automatically collect certain technical information when you use the Service:

• Device type, operating system, and app version
• IP address and general location (country/region)
• App session activity (screens visited, actions taken)
• Error and crash reports

This data is used solely to maintain and improve the Service.

Billing Information

Subscription payments are processed by Stripe. We do not store your credit card number or payment credentials. We receive a tokenized reference from Stripe that identifies your payment method for subscription management purposes.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the Service — processing inspections, storing reports, managing fleet and driver accounts.
• To send transactional emails — account verification, password resets, subscription receipts, and service notifications.
• To process payments — managing your subscription through Stripe.
• To improve the Service — analyzing usage patterns, diagnosing bugs, and making product improvements.
• To comply with legal obligations — responding to lawful requests from regulatory authorities or courts.
• To communicate with you — responding to support inquiries and providing customer service.

3. Data Storage and Security

Roll Ready uses Supabase as its backend database and storage provider. Supabase infrastructure is hosted on Amazon Web Services (AWS). As a result, your data may be stored on servers located in the United States or the European Union.

We implement industry-standard security practices including:

• Encryption in transit (TLS/HTTPS for all data transferred between your device and our servers)
• Encryption at rest for stored data and files
• Row-level security controls in our database
• Access control limiting which personnel can access production systems

While we take reasonable steps to protect your data, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

4. Data Retention

We retain your data for as long as your account remains active. This includes inspection records, vehicle information, defect photos, and driver profiles associated with your subscription.

If you cancel your subscription and request deletion of your data, we will permanently delete your account data within 90 days of the cancellation date. You may submit a deletion request by emailing support@roll-ready.com.

Certain records may be retained longer where required by law (for example, records subject to a legal hold or audit).

5. Third-Party Services

We use the following third-party services to operate Roll Ready. Each has its own privacy policy governing how it handles data.

We do not authorize these third parties to use your information for any purpose beyond what is necessary to provide services to us.

6. Cookies and Tracking

The Roll Ready website uses minimal cookies. We use session cookies to maintain your authenticated state while you are logged in to the web dashboard. We do not use third-party advertising cookies or cross-site tracking technologies.

The Roll Ready mobile app does not use browser cookies. Local data is stored on-device to support offline inspection access.

7. Your Rights

You have the following rights with respect to your personal information:

• Access — You may request a copy of the personal information we hold about you.
• Correction — You may request that we correct inaccurate or incomplete information in your account.
• Deletion — You may request deletion of your account and associated data, subject to the 90-day retention period described above.
• Portability — You may request an export of your inspection data in a machine-readable format.
• Objection — You may object to certain uses of your data by contacting us.

To exercise any of these rights, email us at support@roll-ready.com. We will respond within 30 days.

8. Children's Privacy

Roll Ready is a commercial business application intended for adults operating commercial vehicles. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has created an account, please contact us and we will delete it.

9. International Data Transfers

Roll Ready is operated in Ontario, Canada. Because our infrastructure is hosted on AWS through Supabase, your data may be processed and stored in the United States or the European Union. By using the Service, you consent to this transfer. We ensure that appropriate safeguards are in place for any cross-border data transfers.

10. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the applicable federal laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario's Freedom of Information and Protection of Privacy Act where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date at the top of this page and notify active subscribers by email. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to us: