Privacy policy
What we collect, why, and who else touches it. We don't sell your information.
What we collect about you
- Account: your name, email and password (the password is stored scrambled; we can't read it).
- Setup: the state you call in, business types, phone number and payment link you enter so they appear in your scripts and handoff sheets.
- Your work in Rover: leads you mark, notes, the sites you build and edit, and which sites you put live.
- Billing: your plan and payment status. Card details go straight to Stripe; we never see them.
- Basics from your browser: where you came from (for example a TikTok link), a login session kept in your browser's storage, and a rover_ref cookie for 60 days if you opened someone's referral link. We don't use advertising trackers.
- Referrals: who referred you (if anyone), and the plan payments that earn them a commission. If you refer people, you see each one's first initial, signup date and whether they're paying, never their name, email or other details.
- Website Checkup: the website or business you check and a scrambled (hashed) version of your IP address to limit abuse. Reports are saved so the link can be shared.
What we collect about businesses and their owners
- Public business information (name, address, phone, hours, category, photos, reviews) from public listings, Google and the business's own website, used to build previews.
- When you put a site live or buy a domain, the owner's name and email that you enter. For domains, their name, email, phone and business address are sent to Cloudflare Registrar and the domain registry, as ICANN requires.
How we use it
To run your account, build and host sites, fill in your scripts, count usage against your plan, bill you, prevent abuse, and answer support requests. We email you about your account and billing. We don't sell or rent anyone's information.
Who helps us run Rover
- Supabase: stores accounts and app data (USA).
- Cloudflare: hosts the website and live client sites, and registers domains.
- Stripe: takes payments (for Rover's company, Granite Built).
- Google: business details (Places) and the AI that writes site text (Gemini). We send public business information and your edit requests, never your payment details.
- Foursquare Open Source Places and Pexels: business listings and stand-in photos. We don't send them anything about you.
How long we keep it
We keep your data while your account is open. If you delete your account, we delete your data within 30 days, except payment and tax records we're required to keep. Live sites you've sold are handled as described in the terms.
Your choices
- Change your details anytime in Settings.
- Email us to get a copy of your data, fix something, or delete your account.
- Business owners can email us to have a preview of their business removed.
Delete your account
To delete your Rover account and its data, email [email protected] from the email address on the account with the subject "Delete my Rover account". This works the same whether you use Rover on the web, the Android app or the Windows app. Cancel your plan in Billing first if it's still active. We confirm by email and delete your account, leads, notes and preview sites within 30 days. Payment and tax records we're required to keep stay with Stripe and Granite Built. Live sites you've already sold to a business are handled as described in the terms.
Security and age
Data is sent over HTTPS and access is limited by account. No system is perfectly secure, but we'll tell you promptly if something happens that affects your information. Rover is only for people 18 and over.
Contact
Questions, requests or problems: email [email protected]. We usually reply within 2 business days.
Effective October 13, 2026. See also: Terms of service, Refund policy.