1. About this policy
Roots Technologies Corporation ("Roots," "we," "us," or "our") operates the website at roots.finance (the "Site"). This policy explains what information we collect when you visit the Site, how we use it, and the choices available to you.
Roots Technologies Corporation is a Delaware corporation with a registered address at 8 The Green, Dover, Delaware 19901, United States.
What this policy does not cover. This policy applies only to your use of the Site as a visitor. It does not apply to:
If you are a Roots customer, an authorized user of the platform or API, or an applicant for our services, the disclosures provided to you at onboarding govern that relationship, not this policy.
No mobile applications. Roots products are delivered through a web browser and through the API only. We do not publish mobile applications, and we do not collect mobile application data, device permissions, advertising identifiers, or push notification tokens.
2. Roots is not a bank
Roots Technologies Corporation is a financial technology company, not a bank. Banking services referenced on the Site are provided by Roots' partner financial institution. Where deposit insurance is available, it is provided by the Federal Deposit Insurance Corporation ("FDIC") through that partner bank, subject to FDIC rules, coverage limits, and conditions. FDIC insurance protects against the failure of an FDIC-insured bank. It does not protect against the failure of Roots or of any non-bank party, and Roots itself is not FDIC-insured and does not hold deposits.
3. Information we collect
We have designed the Site to collect as little personal information as possible. The Site does not host account registration, customer onboarding, or platform access.
3.1 Information you provide voluntarily.
The Site does not currently include contact forms or newsletter signup. If you choose to contact us using an email address published on the Site, we will receive your email address and whatever information you choose to include in your message.
3.2 Information collected automatically.
When you visit the Site, we and our analytics provider automatically collect certain technical information, including:
3.3 What we do not collect through the Site.
We do not collect Social Security numbers, government identification numbers, financial account numbers, payment card details, biometric information, precise geolocation, or health information through the Site. We do not collect information from mobile applications, because we do not publish any. We do not knowingly collect information from children (see Section 10).
4. Cookies and similar technologies
The Site uses cookies and similar technologies, deployed and managed through Google Tag Manager.
Strictly necessary cookies are required for the Site to function and to maintain its security. These cannot be disabled through the Site.
Analytics cookies help us understand how visitors use the Site — which pages are read, how people arrive, and where they leave — so that we can improve it. We use Google Analytics 4 for this purpose. Information collected by Google Analytics is processed by Google LLC in accordance with its own privacy policy, available at https://policies.google.com/privacy.
We do not use advertising cookies, conversion-tracking pixels, or cross-site tracking technologies on the Site.
You can control cookies through your browser settings, which typically allow you to block or delete them. Blocking some cookies may affect how the Site functions. You can opt out of Google Analytics specifically by installing Google's browser opt-out add-on, available at https://tools.google.com/dlpage/gaoptout.
5. How we use information
We use the information described above to:
We do not use information collected through the Site to make automated decisions that produce legal or similarly significant effects, and we do not use it for profiling.
6. Business purposes for processing
We process the limited personal information described in this policy for our legitimate business purposes: operating and securing a website, understanding audience engagement, and responding to people who contact us. Where applicable law requires consent for a particular technology, we will obtain that consent before the technology is used.
7. How we share information
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
We share the limited information described above only as follows:
Service providers. We engage vendors to provide website hosting and content delivery, web analytics, email and communications, and security and fraud prevention. These providers process information on our behalf, under contract, and are not permitted to use it for their own purposes. Our analytics provider is Google LLC.
Legal and safety. We may disclose information where we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of Roots, our customers, or others.
Business transfers. If Roots is involved in a merger, acquisition, financing, reorganization, or sale of assets, information covered by this policy may be transferred as part of that transaction. We will take reasonable steps to ensure the information remains protected and subject to commitments consistent with this policy.
Regulators and partner institutions. We may share information with regulators, auditors, and our partner financial institutions where required in connection with our regulated activities or their oversight obligations.
8. Retention
We retain information collected through the Site only as long as necessary for the purposes described in this policy.
User-level and event-level analytics data is retained for 14 months, after which it is automatically deleted. Aggregated and de-identified reporting data, which does not identify any individual, may be retained indefinitely. Email correspondence is retained for as long as needed to address the matter and to maintain a reasonable business record.
9. Security
We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, access controls, and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
The Site is intended for a business and professional audience and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it. If you believe a child has provided us with personal information, contact us at the address in Section 15.
11. Your choices and rights
Depending on where you live, you may have rights in relation to your personal information. We extend the following rights to all visitors located in the United States, regardless of state of residence:
To exercise a right, contact us using the details in Section 15. We will acknowledge your request promptly and respond within the time required by applicable law. We will take reasonable steps to verify your identity before acting, which may require additional information from you. You may designate an authorized agent to submit a request on your behalf, subject to verification of the agent's authority.
Because the Site collects little beyond analytics data, a request about your Site activity may be difficult for us to associate with you as an identifiable individual. Where we cannot reasonably verify a link between a request and specific data, we will tell you so rather than act on data that may belong to someone else.
12. Opt-out preference signals and Do Not Track
Global Privacy Control. We recognize and honor the Global Privacy Control ("GPC") signal. Where we detect a GPC signal transmitted by your browser or an extension, we treat it as a valid request to opt out of any sale or sharing of personal information associated with that browser. Because we do not sell or share personal information, this signal does not change how we handle your data, but it is respected in all cases.
Do Not Track. There is no consistent industry standard governing how websites should respond to browser "Do Not Track" signals, and the Site does not respond to them. We honor GPC as described above.
13. Visitors outside the United States
The Site is operated from the United States. If you access the Site from outside the United States, the information described in this policy will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country. By using the Site, you understand that your information will be processed in the United States.
14. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above. If we make material changes to how we collect or use personal information, we will provide a more prominent notice on the Site before the change takes effect. We encourage you to review this policy periodically.
15. Contact us
Questions, requests, or complaints about this policy can be sent to:
Roots Technologies Corporation Attn: Privacy 8 The Green, Suite A Dover, Delaware 19901 United States