Privacy Policy

What we collect

We collect what you choose to give us, and a little information about how you use the demo.

• When you request a demo: your name, work email, phone number, business name, website (if you add one), business type (trade) and company size.
• While you use the demo: which topics you viewed, whether you finished or ended the demo, whether you asked the team to get in touch, and whether you chose Get started (which tells us you may be interested in using Vrosa).
• When you create a Vrosa account: your name and email address (verified with a one-time code, or provided by Google, Microsoft or Apple if you use one of them to sign in), and your answers while setting up your workspace: your role, business name, website, business type, business size and main goal.
• If you upgrade to a paid plan: our payment processor, Stripe, collects and stores your payment method details (a card, a U.S. bank account or a wallet). Vrosa does not store your full card or bank account details. We receive billing and subscription information from Stripe, as needed to operate your account, and keep it: your Stripe customer and subscription identifiers, your plan, your subscription and payment status (for example, whether a payment failed), and your trial, renewal and cancellation dates. We do not ask for a payment method for the Free plan.
• When you use Vrosa: the customer, estimate and other business information you add to your workspace.
• If you connect a bank: your business’s bank account and transaction data, through Plaid. This is optional; see Bank and financial account data below.
• When you email us: the message you send and your email address.

You do not need an account to request or use the demo. Requesting a demo does not create one. Creating an account does not start a trial and does not need a payment method: a new workspace starts on the Free plan. A payment method is collected only if you choose to upgrade to a paid plan; Stripe, not Vrosa, collects and stores it.

Rosa, the guide in the demo, currently answers from information built into this website. What you type to Rosa stays in your browser: it is not sent to us or saved. If that changes, we will update this page first.

How we use it

• To provide and personalize the demo. For example, Rosa may greet you by first name and mention your business type.
• To respond to your demo or contact request, by email or phone.
• To create and run your account and workspace, and to keep it secure.
• If you asked for a demo before creating an account, to connect the two so we can understand how people come to Vrosa.
• To let our team know a request came in. We send an alert to our own inbox, which uses an email delivery service (see Sharing).
• To understand interest in Vrosa, such as which parts of the demo people look at.
• To operate, secure and improve the service, including preventing abuse such as automated form submissions.

Bank and financial account data

This section applies only if the owner of a Vrosa workspace chooses to connect a business bank account to Vrosa. It is optional: none of this is collected unless you connect a bank. Before Plaid’s window opens, Vrosa asks you to read this section and Plaid’s privacy notice and to tick a box saying you agree; we record that you did, with the version of this page you were shown.

• What we collect, through Plaid: the name of the bank; the names and last four digits of the accounts you choose to share; their balances; and their transactions (date, amount, description, reference and merchant text, and whether a transaction is still pending). We also keep technical details of the connection, such as its status, when the bank’s permission expires and the history of our checks.
• What we do not collect: your bank login or password (you enter it in Plaid’s window or at your bank’s own site, never in Vrosa), full account numbers, or routing numbers. Vrosa can read; it cannot move money, send payments or change anything at your bank.
• Why we use it: to show your bank transactions as lines for you to review and match against your invoices, bills and expenses, to keep balances up to date, and to keep the connection working and secure. We do not use it for advertising and we do not sell it. Transactions we read are kept in your workspace; the ones you choose to import become bank lines in your books.
• Where it is stored: in Vrosa’s database, hosted in the United States, inside your workspace. Members of your workspace who are allowed to see banking can see it. The key that lets Vrosa read from your bank (Plaid’s access token) is stored encrypted and is destroyed when you disconnect.
• Who may receive it: Plaid, which collects your bank sign-in details and account data when you connect and handles them under its own privacy notice (https://plaid.com/legal/#end-user-privacy-policy); the hosting and database providers that store the data for us; people in your workspace with banking access; and anyone the law requires us to give it to.
• How long we keep it: bank lines you import become part of your accounting records and stay in your workspace for as long as the workspace exists. We have not set a fixed period after which they are deleted. Short-lived technical notices from Plaid are deleted after about 14 days. Database backups are kept for about six hours and may briefly hold copies of data that was just deleted.
• Disconnecting: in Vrosa, choose Banking, then Bank connections, then Disconnect. That stops all further collection, closes the connection, destroys the stored access key and asks Plaid to remove the connection. Choose Change shared accounts there to share fewer accounts. You can also end the access from your bank or from Plaid.
• Asking us to delete it: email v@vrosa.co and say which workspace and bank. We handle these requests by hand and do not yet promise a deadline. Some imported bank lines are part of your accounting records and deleting them can change your books; we will tell you what we can delete and what we would have to keep.

Vrosa for iPhone

This section applies if you use the Vrosa app on an iPhone. The rest of this page applies to the app as well.

• Signing in: you sign in to the app with your Vrosa email and password. Your password is handled by our sign-in provider, Clerk. The app then keeps a session from Clerk and sends it to Vrosa with each request, so that Vrosa knows who you are and which workspace you may use.
• What the app shows and sends: the jobs, customers, addresses, notes, forms and checklists your business has entered in Vrosa, as far as the permissions your business gave you allow. What you do in the app (starting or completing a job, ticking a checklist item, time entries, answers to forms, and a customer’s signature drawn on the screen) is sent to Vrosa and stored in your business’s workspace, in the same way as the same information entered on the website.
• Device registration: when you sign in, the app registers your phone with Vrosa. We store a random installation identifier that the app creates on first launch (it is not your phone’s hardware identifier or advertising identifier), the platform (iOS), the app version, the iOS version, and when the phone was last seen, linked to your account in your workspace. We use it to run the app, to ask you to update when an app version is no longer supported, and so that a lost or retired phone can be removed from the workspace.
• On your phone: the app keeps your session, the installation identifier and the workspace you last chose in the iPhone Keychain, the phone’s secure storage. Signing out removes your session and the remembered workspace. The installation identifier stays on the phone.
• What the app does not use: your location, camera, photos, contacts, microphone or notifications. Vrosa does not add advertising or analytics tools to the app, and the app does not track you across other companies’ apps or websites.
• Who else receives it: Clerk, our sign-in provider, receives your sign-in details and handles them under its own privacy notice; our hosting and database providers store the data for us (see Sharing). We do not sell it.
• Keeping and deleting it: what the app sends is kept with your workspace’s records, as described in How long we keep it. To ask us to access, correct or delete information, email v@vrosa.co (see Your choices).

Demo requests are not marketing sign-ups

Asking for a demo does not sign you up for newsletters or promotional marketing, and we do not pre-tick any consent box. We may contact you about your request. If we offer marketing emails or messages in the future, we will ask you for that separately and you can say no.

Sharing

We do not sell your personal information. We share it only with service providers that help us run Vrosa, such as hosting, database, email delivery, sign-in (authentication), payment processing (Stripe) and, if you connect a bank, bank connection (Plaid), and only as needed to operate the service and respond to you, or where the law requires it.

Cookies and similar storage

• When you create an account or sign in, our authentication provider keeps your sign-in session using cookies, so you stay signed in.
• A session cookie keeps your demo session so the demo can find your place and greet you by name. It is not readable by scripts on the page and expires after seven days.
• Your browser stores your light or dark theme choice, and your conversation with the website assistant for the length of your visit.
• We may use aggregate analytics about how the site is used. We do not put the details you submit in the demo form into analytics.

How long we keep it

Demo requests that do not become customers are kept for up to 12 months and then deleted. This is our current internal default, not a legal requirement, and we may change it. If a demo request leads to a customer relationship, the information is handled as part of that relationship instead. We keep a record that a deletion happened, without keeping the personal details that were deleted.

Your choices

You can ask us to access, correct or delete the information you have shared by emailing v@vrosa.co. You can also ask us to stop contacting you at any time.

Changes and contact

We will update this page when our practices change. Questions about this policy? Email v@vrosa.co and we will get back to you.