Privacy Policy

1. Information we collect

Your Roblox account. You sign in with Roblox, and Roblox tells us your Roblox user ID, username, display name and profile picture link. Your account here is keyed on that user ID. Roblox doesn't give us your password, your email address or access to your Robux, and we never ask for them. We don't keep Roblox's sign-in tokens after you've signed in. We record when you agreed to the Terms and this policy.

Billing. Dodo Payments processes subscriptions as our merchant of record. Dodo collects your payment details, name, email address and billing address. We receive your email address, country, subscription status, renewal date and Dodo's customer and subscription IDs. We never receive or store your card or bank details.

Your groups and payouts. This is the information you put into RoLedger:

• The Roblox groups you connect: group ID, name, owner's username and member count.
• The people you add to a team: their Roblox user ID, username, the role you give them and their shares.
• The sales files you upload. From each sale we keep the date and time, where it was sold, the experience and item IDs and names, the item type, the hold status, the price and the Robux that reached the group. We don't keep the Buyer User Id column, and we don't keep the file itself: only its name and a fingerprint (a SHA-256 hash) to recognise it if it's uploaded again.
• What you do with each month: extra income you add, the payouts worked out when you close it, the date you mark it paid and any reason you give for voiding it.

Public Roblox information. To show and check your groups, we look up information Roblox makes public: group details, staff roles and the people in them, a group's games and avatar items, avatar pictures, and whether a person is in a group. We fetch it when a page needs it and keep it in a short-lived cache.

Technical information. Our hosting provider keeps standard server logs (IP address, browser type, pages requested and times) for security and troubleshooting. We don't use advertising cookies, cross-site tracking or third-party analytics.

Messages. If you email us, we keep the conversation so we can help you.

2. How we use it

• To provide RoLedger: work out payouts, produce payout files, reports and ledger exports, and keep your records.
• To run your account and subscription, and to send emails about them (for example a failed payment or a change to these terms).
• To answer your messages.
• To keep RoLedger secure, prevent abuse and fix problems.
• To meet legal, tax and accounting obligations.

We don't sell personal information, use it for advertising, or use it to train AI models. We don't make decisions about you by automated means that have legal or similarly significant effects.

3. Legal bases

Where the law asks for a legal basis (for example the GDPR or South Africa's POPIA), we rely on:

• contract: to provide the service you signed up for;
• legitimate interests: to keep the service secure and improve it, in ways you'd reasonably expect;
• legal obligation: to keep billing and tax records;
• consent: where we ask for it, which you can withdraw at any time.

4. The people you add to your team

When you add people to a team, you decide whose information is added and why: to work out and record what you pay them. For that information we act on your instructions as your service provider (a “processor” under the GDPR, an “operator” under POPIA), and you are responsible for having a lawful reason to process it. We use it only to provide RoLedger to you. Many Roblox creators are under 18; add only what's needed to pay them.

5. Who we share it with

We share information only with the providers that run RoLedger for us, under contracts that limit how they use it:

• Vercel, which hosts the website and app;
• Turso, which hosts the database;
• Dodo Payments, which sells and bills subscriptions as merchant of record.

Signing in exchanges tokens with Roblox, and public lookups send Roblox the group and user IDs being looked up. We also disclose information when the law requires it, to protect rights and safety, or to a buyer if RoLedger is sold, in which case this policy continues to apply to it.

6. Where it's processed

Our providers process information in the United States and other countries. Where the law requires it, transfers are covered by safeguards such as the European Commission's standard contractual clauses.

7. How long we keep it

• Your account, groups, teams and ledger: for as long as your account is open, or until you delete them.
• After you close your account, or ask us to delete it: we delete your data within 30 days. Deleted data can remain in backups for up to a further 30 days before they're overwritten.
• Billing records: for as long as tax and accounting law requires.
• Server logs: for the period our hosting provider keeps them, typically days to weeks.

Download your ledger (Excel or CSV) and reports before you close your account if you want to keep them.

8. Your rights

Depending on where you live, you can ask to see the personal information we hold about you, correct it, delete it, receive a copy, restrict or object to how we use it, and withdraw consent. Email us and we'll answer within 30 days. We may need to confirm it's you. You can also complain to your data protection authority: in South Africa, the Information Regulator; in the EU or UK, your local supervisory authority. If your request is about a team you were added to, we'll pass it to the group owner who added you and help them answer it.

9. Age

RoLedger is for people who run Roblox groups and pay a team. You must be 18, or the age of majority where you live, to subscribe. If you're 13 to 17, you may use RoLedger only with a parent or guardian who agrees to the Terms and handles payment. RoLedger isn't meant for children under 13, and Roblox doesn't let under-13 accounts sign in to apps like ours. If we learn we hold an under-13 user's account information, we delete it.

10. Security

Connections use HTTPS. Your sign-in is a random token in an HTTP-only cookie; we store only a one-way hash of it, and signing out deletes it. Access to the database is limited to the people and systems that run RoLedger. We never handle your Roblox password, login cookie or Robux. No system is perfectly secure; if a breach affects your information, we'll tell you and the authorities as the law requires.

11. Cookies

We use only cookies needed for RoLedger to work, so we don't ask for cookie consent:

• rl_session: keeps you signed in, for up to 30 days or until you sign out.
• rl_oauth: protects the sign-in with Roblox while it's in progress, for up to 10 minutes.
• roledger-demo: shows the demo instead of your own groups, until you leave the demo or close your browser.

Dodo Payments may set its own cookies on its checkout pages, under its own policy.

12. Changes

If we change this policy, we'll update the effective date above. For significant changes we'll tell you by email or in the app before they take effect.

13. Contact

Thabani Takwena, a sole proprietor in South Africa. Email hello@roledger.app.