Privacy Policy
Your privacy is fundamental to how we build and operate Rolance. This document outlines our data practices, how your information is protected, and your rights as a creator or shopper.
Introduction
Rolance ("we", "us", "our") operates the rolance.me platform — a multi-vendor e-commerce destination where creators host 3D storefronts, sell digital and physical products, and manage their store operations.
This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website, register for an account, set up a seller storefront, or make purchases through our ecosystem.
Information We Collect
We collect information that you directly provide to us, as well as data automatically generated when you interact with the rolance.me platform:
Email address, cryptographically hashed passwords, display name, avatar, bio, and account preference settings.
Store name, custom subdomain, product listings, pricing configurations, digital assets, and 3D environment layout parameters.
Purchase history, order details, payment records. Payments are securely processed by Polar.sh; we do not store full payment card details or CVVs.
IP address, browser type, operating system, device identifiers, pages visited, and time spent on the platform.
Product images, digital files, asset bundles, product descriptions, and storefront copy uploaded by creators.
How We Use Your Information
We utilize collected data strictly to fulfill platform functionality, safeguard our users, and improve the user experience:
- •Provide & Maintain Platform: To deliver and maintain seller storefronts, product catalogs, and user accounts.
- •Process Transactions: To process payments and payouts securely via Polar.sh.
- •AI-Powered Themes: To generate AI-powered store themes (color extraction happens client-side directly in your browser).
- •Communication: To communicate important updates, order notifications, and platform alerts.
- •Fraud Prevention & Security: To prevent fraud, malicious activity, and ensure platform security.
- •Service Optimization: To improve our services, performance, and user experience.
Data Storage & Security
Supabase & AWS Infrastructure
Data is stored securely via Supabase (hosted on enterprise AWS infrastructure).
Row Level Security (RLS)
We use Row Level Security (RLS) to ensure complete data isolation between users.
Hashed Passwords
Passwords are salted & hashed and never stored in plain text.
HTTPS / TLS Encryption
We use HTTPS/TLS encryption for all data in transit across our networks.
Cookies & Tracking
- •We use essential cookies for authentication and session management.
- •We do not sell your personal data to third parties.
- •We may use analytics tools to understand platform usage and optimize reliability.
Third-Party Services
These third-party providers assist in operating our platform and have their own privacy policies:
- SupabaseDatabase & authentication provider
- Polar.shPayment processing platform
- VercelHosting infrastructure
Data Sharing & Rights
Data Sharing
- •We do not sell personal data.
- •We share data only as necessary with payment processors and as required by law.
- •Seller store information is publicly visible on their storefront.
Your Rights (GDPR / CCPA)
- ✓ Right to access: Request access to your personal data.
- ✓ Right to rectification: Correct inaccurate information.
- ✓ Right to erasure: Request deletion ("right to be forgotten").
- ✓ Right to data portability: Obtain an export of your data.
- ✓ Right to opt out: Opt out of marketing communications.
8. Data Retention
We retain data for as long as your account is active. Upon account deletion, data is removed within 30 days.
9. Children's Privacy
Our platform is not intended for children under 13. We do not knowingly collect information from children under 13.
10. Policy Changes
We may update this policy. We will notify you via email or platform notification when updates occur.
Privacy Contact
For privacy-related inquiries, requests, or questions regarding this policy:
Contact privacy@rolance.me