This Privacy Policy explains how AutoROICalc collects, uses, stores, shares, and protects Personal Data when you visit our website, create an account, use AutoROICalc applications, connect integrations, contact us, or otherwise use the Service.
This Privacy Policy is intended to be read together with our Terms of Service. Capitalized terms used but not defined here have the meaning given in the Terms of Service.
Who We Are
The controller for the Personal Data described in this Privacy Policy is AutoROICalc s. r. o., registered in the Commercial Register maintained by the District Court Nitra, Section: Sro, file no. 62979/N, with registered office at Trieda Andreja Hlinku 616/36, 949 01 Nitra, Slovak Republic, business ID: 56158033, tax ID: 2122219165 (“AutoROICalc”, “we”, “us”, or “our”).
You can contact us about privacy matters at support@autoroicalc.com.
Scope
This Privacy Policy applies to the AutoROICalc website, web application, desktop application, mobile application, APIs, integrations, downloadable software, support, and related services.
The Service is designed for business and professional use. If you use the Service on behalf of a company or other legal entity, we may process your Personal Data as a representative, employee, contractor, administrator, billing contact, technical contact, or authorized user of that entity.
Controller and Processor Roles
We act as a controller when we decide why and how Personal Data is processed, for example for account management, billing, website analytics, security, support, marketing, and legal compliance.
When Customer Data contains Personal Data that a Customer uploads, imports, records, configures, or otherwise processes through the Service for the Customer’s own purposes, the Customer is usually the controller and AutoROICalc is usually the processor. In that role, we process such Personal Data on the Customer’s documented instructions, including the Terms of Service, the Customer’s Service configuration, and any applicable Data Processing Agreement.
If you are an individual whose Personal Data is included in a Customer’s records, reports, dashboards, integrations, or other Customer Data, you should normally contact that Customer first to exercise your data protection rights. We will reasonably assist the Customer where required by GDPR.
Personal Data We Collect
Depending on how you use the Service, we may collect the following categories of Personal Data:
- Account data, such as name, e-mail address, password hash, language, timezone, number format, account status, and authentication method.
- Business and billing data, such as company name, business ID, tax ID, VAT ID, billing address, order information, invoices, payment status, and payment metadata. We do not intentionally store full payment card numbers.
- Service data, such as records, reports, dashboards, report templates, settings, imported files, shared links, API tokens, generated snippets, automation settings, and integration configuration.
- Integration data, such as connected account identifiers, tokens, permissions, properties, sites, ad accounts, campaign statistics, analytics metrics, search performance data, CSV/XML import data, and other data you choose to import or connect.
- Device and technical data, such as IP address, browser type, device type, operating system, application version, identifiers, logs, error reports, and security events.
- Website and usage data, such as pages viewed, buttons clicked, referral URLs, approximate location derived from IP address, cookie identifiers, session data, and product usage events.
- Support and communication data, such as messages you send us, attachments, support history, feedback, and responses to surveys or forms.
- Marketing preference data, such as newsletter subscription status, consent records, unsubscribe status, and communication preferences.
How We Collect Personal Data
We collect Personal Data directly from you when you create an account, use the Service, enter records, upload or import files, configure dashboards or reports, connect integrations, make a purchase, subscribe to communications, or contact us.
We may collect Personal Data automatically when you visit our website or use the Service, including through cookies, similar technologies, logs, analytics tools, and security systems.
We may also receive Personal Data from Third-Party Services that you connect to AutoROICalc, such as Google services, Facebook or Meta services, Heureka, app stores, payment providers, authentication providers, and other platforms or data sources.
Purposes and Legal Bases
We process Personal Data for the purposes and legal bases below. More than one legal basis may apply depending on the context.
| Purpose | Examples of Personal Data | Legal basis |
|---|---|---|
| Provide and operate the Service | Account data, Service data, integration data, technical data | Performance of a contract; legitimate interests |
| Create and manage accounts | Name, e-mail, password hash, settings, authentication data | Performance of a contract |
| Process orders, subscriptions, invoices, and payments | Billing data, payment metadata, company details | Performance of a contract; legal obligation |
| Import, calculate, visualize, and report business data | Customer Data, records, reports, dashboards, integration data | Performance of a contract; processing on Customer instructions where we act as processor |
| Provide support and respond to requests | Contact data, support messages, technical logs, attachments | Performance of a contract; legitimate interests |
| Secure, monitor, debug, and improve the Service | Logs, device data, usage data, error reports, security events | Legitimate interests; legal obligation where applicable |
| Send service notices and account messages | E-mail address, account status, plan information | Performance of a contract; legitimate interests |
| Send marketing communications | E-mail address, marketing preferences, consent records | Consent where required; legitimate interests where permitted by law |
| Comply with legal, accounting, tax, and regulatory duties | Billing data, invoices, transaction records, communications | Legal obligation |
| Establish, exercise, or defend legal claims | Relevant account, billing, support, technical, and usage data | Legitimate interests; legal obligation |
Google API Data
If you connect Google services, AutoROICalc may access Google user data depending on the Features you enable, such as Google Sign-In profile information, Google Analytics properties and reporting data, Google Search Console sites and search performance data, and Google Ads-related data or script-generated statistics.
We use Google user data only to provide and improve user-facing AutoROICalc Features that you enable, such as authentication, account connection, data import, reporting, dashboards, automation, and troubleshooting. We do not sell Google user data. We do not use Google user data for advertising, retargeting, credit-worthiness, lending, or to train generalized artificial intelligence or machine learning models.
We do not allow humans to read Google user data unless you ask us to do so for support, it is necessary for security or abuse investigation, the data is aggregated and anonymized for internal operations, or we are required to do so by law. We transfer Google user data only as necessary to provide or improve the enabled Features, comply with law, protect security, or as part of a merger, acquisition, or sale of assets where permitted by the Google API Services User Data Policy.
AutoROICalc’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google integrations in the Service where available, through your Google account permissions, or by contacting us at support@autoroicalc.com. Disconnecting an integration may stop related imports, reports, automations, or other Features from working.
Other Integrations
If you connect or use other integrations, such as Facebook or Meta services, Heureka CSV imports, web event tracking, APIs, app stores, payment processors, or other Third-Party Services, we process the data you authorize, upload, import, or configure for the purposes of providing the connected Feature.
Third-Party Services are governed by their own privacy policies and terms. We do not control their processing. You should review the relevant third-party policies before connecting or using them with AutoROICalc.
Cookies and Similar Technologies
We use cookies and similar technologies to operate the website and Service, keep you signed in, remember preferences, protect security, understand usage, improve the Service, and, where enabled, support marketing or advertising measurement.
- Necessary cookies are required for the website or Service to work, such as authentication, security, load balancing, and account session cookies.
- Preference cookies remember choices such as language, region, or display settings.
- Analytics cookies help us understand how visitors and Users interact with the website and Service.
- Marketing or advertising cookies may help measure campaigns or personalize marketing where we use such tools.
Where required by law, we use non-essential cookies only with your consent. You can manage cookies through your browser settings and, where available, through our cookie banner or preference tool. Blocking cookies may affect website or Service functionality.
Sharing Personal Data
We may share Personal Data with the following categories of recipients:
- hosting, infrastructure, storage, security, and backup providers;
- payment processors, accounting, tax, and invoicing providers;
- e-mail, notification, support, and communication providers;
- analytics, diagnostics, crash reporting, and product improvement providers;
- authentication providers and Third-Party Services you choose to connect;
- app stores, distribution platforms, and device platform providers where you use mobile or desktop versions;
- professional advisers, auditors, insurers, banks, and legal service providers;
- public authorities, courts, regulators, law enforcement, or other third parties where required by law or necessary to protect legal rights; and
- a buyer, successor, or relevant third party in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar transaction.
We do not sell Personal Data.
International Transfers
We are established in Slovakia. We may process Personal Data in the European Economic Area and, where necessary, in other countries where we or our service providers operate.
If Personal Data is transferred outside the European Economic Area to a country that has not been recognized as providing an adequate level of protection, we use appropriate safeguards where required by law, such as European Commission Standard Contractual Clauses, supplementary measures, or another lawful transfer mechanism.
Retention
We keep Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account data is generally kept while your Account is active and for a reasonable period after closure where needed for security, legal, accounting, or dispute purposes.
- Customer Data is generally kept while needed to provide the Service and may be deleted or made unavailable after Account closure, Service Plan expiry, termination, deletion request, or prolonged inactivity, subject to backups and legal retention duties.
- Billing, accounting, and tax records are kept for the period required by applicable law.
- Support communications are kept for as long as needed to handle requests, maintain records, improve support, and protect legal rights.
- Technical logs and security records are kept for periods appropriate to security, debugging, fraud prevention, and service operation.
- Marketing data is kept until you unsubscribe, withdraw consent, object where applicable, or the data is no longer needed.
Backups may retain data for a limited additional period before they are overwritten or deleted in the ordinary backup cycle.
Security
We use reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption in transit, logging, backups, provider security controls, and internal access restrictions.
No internet service, software, transmission, or storage system can be guaranteed to be completely secure. You are responsible for using strong credentials, protecting devices and tokens, limiting access to your Account, and promptly notifying us of suspected unauthorized access.
Your Rights
Subject to the conditions and limits in applicable law, you may have the right to:
- request access to your Personal Data;
- request correction of inaccurate or incomplete Personal Data;
- request deletion of Personal Data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive Personal Data you provided to us in a portable format;
- withdraw consent at any time where processing is based on consent; and
- lodge a complaint with a supervisory authority.
You can exercise your rights by contacting support@autoroicalc.com. We may need to verify your identity before responding. We will respond within one month unless GDPR allows an extension because of the complexity or number of requests.
If you receive marketing e-mails from us, you can unsubscribe using the link in the e-mail or by contacting us.
Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. In Slovakia, the supervisory authority is the Office for Personal Data Protection of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic. More information is available at https://www.dataprotection.gov.sk/en/contact/.
Automated Decision-Making
We do not use Personal Data to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless we tell you otherwise and such processing is permitted by law.
Children
The Service is not intended for children or for personal or household use. We do not knowingly collect Personal Data from children. If you believe a child has provided Personal Data to us, contact support@autoroicalc.com.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will use reasonable efforts to notify affected Users, for example by e-mail, in-app notice, or publication on our website. The updated version applies from the date stated in the policy or notice.
Contact
If you have questions about this Privacy Policy, the Personal Data we process, or your data protection rights, contact us at support@autoroicalc.com.
Last updated: July 31, 2026