Privacy Policy

Root Health Ops (“Root Health Ops”, “we”, “our”, “us”) provides software that helps individuals and organisations plan, create, manage and publish professional content, manage communications and workflows, and connect supported third-party services.

This Privacy Policy explains what information we collect, why we use it, how it is protected, when it may be shared, and the choices and rights available to users.

1. Information we collect

Depending on how you use Root Health Ops, we may collect:

• account information such as your name, email address, organisation and user role;
• authentication and account identifiers used to sign you in;
• information you enter into Root Health Ops, including drafts, campaigns, scheduled content, notes, resources and workflow information;
• account identifiers supplied by connected services, such as user IDs, page IDs, profile IDs, channel IDs or account names;
• access and refresh tokens required to maintain authorised third-party connections;
• information returned by connected services where the user has granted permission for Root Health Ops to access it;
• technical and operational information such as connection status, provider errors, publishing results, timestamps and security logs;
• subscription, billing and plan information where paid services are used; and
• communications sent to us for support, account administration or legal enquiries.

2. Connected third-party services

Root Health Ops can connect to services such as Facebook, Instagram, LinkedIn, Threads, TikTok, Google and other supported providers.

Connections are made only after the user authorises access through the relevant provider. Root Health Ops receives only the permissions and information made available through that authorisation.

Depending on the provider and the permissions granted, Root Health Ops may use an authorised connection to perform actions requested by the user, such as identifying the connected account, preparing content, uploading or publishing content, checking connection status, or retrieving supported responses or account information.

Third-party platforms operate under their own terms, privacy policies, permissions and usage limits. Their services may change, restrict or temporarily suspend access independently of Root Health Ops.

3. TikTok data

When a user connects TikTok, Root Health Ops may receive TikTok account identifiers, profile information made available through the approved permissions, access tokens and information required to support authorised TikTok functionality.

TikTok information is used only to provide features the user has chosen to use, such as connecting an account and preparing, uploading or publishing supported content.

Root Health Ops does not sell TikTok user data. TikTok data is not used to build unrelated advertising profiles or sold to data brokers.

Users may disconnect TikTok from Root Health Ops. They may also revoke Root Health Ops access through their TikTok account or request deletion of information held by Root Health Ops.

4. How we use information

We use information to:

• create and administer user accounts;
• provide the Root Health Ops service;
• maintain authorised third-party connections;
• perform actions requested by users;
• prepare, schedule, upload or publish supported content;
• display connection, workflow and publishing status;
• provide AI-assisted drafting and workflow features;
• prevent misuse and protect the security of the service;
• diagnose failures and improve reliability;
• provide customer support;
• administer subscriptions and billing; and
• meet legal, regulatory and contractual requirements.

5. Legal basis for processing

Where UK GDPR or similar data-protection laws apply, we process personal information where necessary to provide our contractual service, where the user has given consent, where processing is necessary for legitimate business and security interests, or where we have a legal obligation.

Where a user connects a third-party service, the user can withdraw that authorisation by disconnecting the service or revoking access through the provider.

6. Multi-tenant organisations

Root Health Ops is a multi-tenant service. Customer organisations have separate workspaces and provider connections.

One organisation does not use another organisation's connected accounts, credentials or provider usage allowance. Access to organisational data is restricted according to workspace membership and authorised roles.

7. AI-assisted features

Some Root Health Ops features use artificial intelligence to help draft, summarise, organise or improve content and workflows. Information may be sent to contracted AI service providers when necessary to provide those features.

Users remain responsible for reviewing generated content before using or publishing it.

8. Sharing of information

We do not sell personal information.

Information may be shared with service providers only where reasonably necessary to operate Root Health Ops. This can include hosting, database, authentication, payment, AI, email and connected-platform providers.

We may also disclose information where required by law, court order, regulatory requirement, or where necessary to protect users, Root Health Ops or others from fraud, abuse or security threats.

9. Access tokens and credentials

Access tokens and connection credentials are used only for the authorised provider connection and associated Root Health Ops functionality.

We apply technical and organisational safeguards intended to restrict unauthorised access to authentication credentials and customer data.

Users should never provide Root Health Ops with their personal social-network password unless the relevant provider's own secure authentication page requests it. Root Health Ops uses provider-authorised authentication flows wherever supported.

10. Data retention

We retain information for as long as reasonably necessary to provide the service, maintain account and security records, satisfy legal or contractual obligations and resolve disputes.

Connected-provider credentials may be deleted, revoked or made unusable when a provider is disconnected, an account is deleted, access expires, or deletion is otherwise required.

Some limited records may be retained where necessary for security, fraud prevention, financial records or legal compliance.

11. Data deletion

Users may request deletion of their Root Health Ops personal data or account information by contacting:

enquiries@roothealth.app

Where appropriate, we will delete or anonymise information unless retention is required for legal, security, contractual or financial-record purposes.

Disconnecting a third-party service stops Root Health Ops from using that connection for future provider actions. Users may also revoke access directly through the relevant provider.

12. International processing

Some service providers and connected platforms may process information outside the United Kingdom or the country in which the user is located.

Where required, we use appropriate contractual, legal or provider safeguards for international transfers of personal information.

13. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or loss.

No online service can guarantee absolute security. Users should protect their own credentials and notify us promptly if they suspect unauthorised access.

14. Your data-protection rights

Depending on your location, you may have rights to access, correct, delete or restrict the processing of your personal information, object to certain processing, request portability, or withdraw consent.

Requests can be sent to enquiries@roothealth.app. We may need to verify the identity of the requester before acting on a request.

15. Children

Root Health Ops is intended for professional and organisational use and is not intended for children under 18.

16. Changes to this policy

We may update this Privacy Policy as the service, law or connected platforms change. The current version and update date will remain available on this page.

17. Contact

Questions about privacy, personal information or deletion requests can be sent to:

enquiries@roothealth.app