Privacy Policy

This Privacy Policy describes how OKO Labs, Inc., doing business as Roilyze(collectively, “we,” “us,” or “our”), a Florida corporation with its principal place of business at 200 S. Andrews Avenue, Suite 504, Fort Lauderdale, Florida 33301 (Broward County), collects, uses, and protects your personal information when you use https://roilyze.comand related services (the “Services”). For GDPR, we are the data controller. By using the Services you consent to these practices. If you do not agree, do not use the Services. See also our Terms of Service.

1. Information we collect

1.1 Information you provide

• Account: email, name, hashed password, and session identifiers.
• Analyses: addresses, beds, baths, purchase prices, and the resulting reports you run.
• Billing: plan, quota counters, and Stripe customer / subscription identifiers. We do not store full card numbers; Stripe processes payments.
• Communications: emails you send to legal@roilyze.com or other published addresses.

1.2 Information collected automatically

• IP address, user agent, timestamps, and pages requested (hosting and security logs).
• Essential cookies for authentication and session integrity.

We do not run third-party advertising pixels on the product. We do not sell personal information.

2. How we use information

• To create and secure your account and run analyses you request
• To enforce monthly quotas and provide paid plans via Stripe
• To operate, debug, and secure the Services
• To respond to support and legal inquiries
• To comply with law and enforce the Terms of Service

3. How we share information

We share information only as follows:

• Processors. Neon (Postgres and authentication), Vercel (hosting), Stripe (payments), AirROI and RentCast (comp data), OpenStreetMap Nominatim (geocoding). They process data to provide the Services and are required to protect it.
• Legal. If required by law, court order, or to protect rights, safety, or property.
• Business transfer. In a merger, acquisition, or sale of assets, under confidentiality.

We do not sell your personal information for marketing.

4. Sub-processors

DPAs with processors are available on request to legal@roilyze.com.

5. Retention

Account and saved analyses stay while the account is active. After you request deletion we remove the profile and stored analyses from the production database, except where we must keep records for tax, dispute, security, or legal purposes. Stripe keeps invoices under its own policy. Server logs follow the host's default retention.

6. Security

We use TLS in transit, hashed credentials, scoped access, and vetted infrastructure. No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you and authorities as required by law.

7. Your rights

You may request access, correction, deletion, or export of personal information we hold. California, Colorado, Virginia, Connecticut, and other state residents may have additional rights; we honor verified requests regardless of residency. EEA/UK users may have GDPR rights including access, erasure, restriction, and complaint to a supervisory authority. To exercise any right, email legal@roilyze.com. We will respond within 30 days.

8. Children

The Services are not intended for anyone under 18. We do not knowingly collect information from children. If you believe we have, contact legal@roilyze.com and we will delete it.

9. International transfers

OKO Labs, Inc. is based in the United States. If you access the Services from outside the U.S., you understand that your information will be processed in the United States under U.S. law, which may differ from your jurisdiction.

10. Changes

We may update this Privacy Policy. We will revise the date above and, for material changes, notify the email on your account or post a notice. Continued use after the effective date constitutes acceptance.

11. Contact

Privacy inquiries: legal@roilyze.com.