Privacy Policy
Who we are
Rooted is a service of Elsinore Advisors LLC, doing business as Elsinore Ventures ("Rooted", "we", "us"), a New York limited liability company, 446 W 23rd St, Apt 3, New York, NY 10011. Rooted runs at www.get-rooted.io and app.get-rooted.io. Questions about this policy: [email protected].
What Rooted does
Rooted audits a company's website and marketing tools, explains what it finds, and, when you approve, makes fixes in the tools you connect. It also drafts marketing content from what you tell us about your company.
What we collect
- Your account. Your email address, and your name and profile picture if you sign in with Google.
- What you tell us. Your company details, team, positioning and messaging answers, campaign choices, and messages you send in the app.
- Your website. The public pages of the site you ask us to audit.
- Tools you connect. Data from the tools you choose to connect, such as Google Analytics, Google Tag Manager, Google Search Console, HubSpot, PostHog, GitHub, Stripe, X and others listed on the Integrations page. We only read and change what each connection's permission allows, and only for your workspace.
- How you use Rooted. Pages viewed, buttons pressed and session recordings in our app, through PostHog, Mixpanel and Amplitude.
- Payments. Stripe processes payments. We never see or store your full card number.
Google user data
When you connect Google, Rooted asks only for the access its features need:
| Access | What Rooted does with it |
|---|---|
| Your Google email and profile | Signs you in and shows who is connected. |
| Google Analytics (read and edit) | Audits your Analytics setup and, when you approve, sets key events and custom dimensions. |
| Google Tag Manager (edit, versions, publish) | Audits your tags and, when you approve, adds or fixes tags and publishes the change. |
| Google Search Console | Reads how your site performs in search and checks your sitemaps. |
| Site Verification | Proves you own your site to Search Console, when you ask us to. |
Rooted's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms:
- We use Google data only to provide and improve the features you see in Rooted.
- We do not sell it, use it for advertising, or give it to data brokers or for credit decisions.
- No person at Rooted reads it unless you agree, or it is needed for security or the law.
- We do not use it to train AI models.
Slack
When an owner adds Rooted to Slack, Rooted stores the Slack workspace's name and id, Rooted's access token (encrypted), and the direct message where notices go. Rooted reads only messages sent to it or that mention it, and the name and email of the person who wrote or pressed Approve, to match them to a member of your Rooted workspace. Those messages are used only to answer that person, are not saved to your workspace, and are never used to train AI models. Disconnecting Slack in Rooted revokes the access and deletes what we stored about the Slack workspace.
How we use your data
- To run audits, show findings, and make the fixes you approve. Rooted changes nothing in your tools until you press approve.
- To draft content for your campaigns, which you review before anything is published or sent.
- To run, secure and improve Rooted, and to email you about your account.
AI
Rooted uses AI models to read findings and write drafts. Your content goes only to AI providers whose terms say they do not train their models on it: Anthropic, and Google (Gemini, on Google's paid terms).
Who we share data with
We share data only with the companies that run Rooted for us, and only what each one needs:
| Company | What they do for us |
|---|---|
| Vercel | Hosts our website and app. |
| Supabase | Stores our database and handles sign-in. |
| Google Cloud | Runs the service that performs audits and fixes. |
| Anthropic | AI models that read findings and write drafts. |
| Google (Gemini) | AI models that read findings and write drafts. |
| Resend | Sends sign-in emails. |
| Stripe | Processes payments. |
| DataForSEO | Search data about your site's domain and keywords. |
| People Data Labs | Looks up job titles and profile links for people in your CRM, when you approve. We send each person's email address. |
| Slack | Delivers Rooted's messages in your Slack, when you add Rooted there. |
| PostHog, Mixpanel, Amplitude | Measure how people use our app. |
We may also share data if the law requires it, or with a buyer if Rooted is sold, under this same policy.
How long we keep it, and how to delete it
- You can disconnect any tool at any time on the Integrations page. Disconnecting deletes the access we stored. You can also remove Rooted's access from your Google account at myaccount.google.com/permissions.
- We keep your workspace data while your account is open. To delete your account and its data, email [email protected]. We delete it from our live systems within 3 days; copies in our database backups are deleted as those backups expire, within 30 days.
Security
Access to your tools is stored encrypted. Each workspace's connections are used only for that workspace.
Children
Rooted is for businesses. It is not meant for anyone under 18.
Changes
If we change this policy, we will post the new version here with a new effective date, and email account owners about important changes.