Read-only inbox access. Local cache, never on our servers. No ad trackers, ever. What Roloflow touches, where it lives, and what we deliberately don't do - in plain English. Email alan@tapcre.com if anything's unclear.
| Category | What | Why |
|---|---|---|
| Email metadata | sender, recipients, subject, date, thread id | match threads to contacts |
| Email bodies | plain text body of each thread | sent to Anthropic Claude for classification |
| Contact data | name, email, company (if you uploaded CSVs) | seed contact rows |
| Classification output | role, interest tags, deal stage, summary, evidence quote | populate the XLSX |
| Billing state | plan id, status, customer/subscription ids, usage counters | enforce quota (managed tier) |
| Store | Contents | Operator |
|---|---|---|
| Local SQLite | Threads (including body text), contacts, extractions, batch metadata, usage counters, license cache. Lives on your machine at data/roloflow.db. |
You |
| Unipile | Your mailbox content under the authorization you granted. | Unipile |
| Anthropic | Each thread body + the system prompt, for the duration of a Batch call. Output stored per Anthropic's policy. | Anthropic |
| Stripe | Customer + subscription records. | Stripe |
| Roloflow servers (managed-tier webhook) | Event metadata only - id, type, livemode. Never event payloads. Never email content. | Roloflow |
The cache lives only on your device. Roloflow's servers never see it. Each thread body you ask Roloflow to classify is held locally in a SQLite file so a killed process can resume without re-fetching from Unipile.
data/roloflow.db on your machine. Excluded from version control.roloflow reset.roloflow reset removes the local cache; we delete your license/usage rows on subscription cancellation.roloflow extract. The rest of the pipeline runs without it.Roloflow uses these processors. Their policies govern data we send to them:
Privacy questions: alan@tapcre.com.