Rover Insights is operated by Forge Intent LLC (“Rover Insights,” “Rover,” “we,” or “our”), 116 Research Dr., Bethlehem, PA 18015. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and the choices you have. It covers our website at roverinsights.ai, the Rover platform at app.roverinsights.ai, our lead intelligence services, and the integrations our clients connect to Rover, including the Rover Insights app for Salesforce.
1. Who this policy applies to
- Website visitors: anyone who browses roverinsights.ai, submits a form, or downloads a resource.
- Platform users: people at our client companies who sign in to the Rover platform, including inside Salesforce or HubSpot.
- Professionals in our lead intelligence data: HR, finance, and business professionals who engage with the communities and events we run, who download our content, or who speak with our Community Development Representatives, and whom we may introduce to a client as a prospective buyer.
- People in our clients' CRM records: when a client connects Salesforce or HubSpot to Rover, limited data about the records involved passes through Rover as described in section 4.
2. Information we collect on the website
When you submit a contact or demo request we collect the details you enter, typically your name, business email address, company, role, and message. When you download a gated resource we collect the email address you provide. We record the date and source of each submission so we can respond and so we know how you found us.
With your consent, given through the cookie banner, we use analytics and advertising tools that set cookies or similar identifiers to measure site traffic, understand which pages are read, and attribute visits to campaigns. These tools may receive your IP address, browser and device characteristics, and the pages you visit. You can change your choice at any time from the cookie preferences link in the site footer. Essential cookies that keep the site working, such as the one that remembers your cookie choice or that keeps a resource download link valid for a short time, do not require consent.
3. Information we collect on the Rover platform
To give you an account we collect your name, business email address, and the organization you belong to. Passwords are verified and stored in hashed form by our identity provider, Clerk; Rover never sees or stores your password. If your organization issues agent credentials or API keys, we store them so they can be checked when used. We log sign-ins, sign-in failures, and the actions taken through our API, with the acting organization and credential, for security and audit purposes. Operational logs do not contain passwords, message bodies, or full email addresses.
4. Information we process for our clients
Lead intelligence.Our business is introducing HR and finance software and service vendors to professionals who are actively evaluating solutions. To do that we collect and maintain business contact information (name, job title, job function, management level, business email address, business phone number, company, industry, and company size), engagement with our content and events (registrations, attendance, downloads, page views, survey and poll answers), and, where a professional speaks with one of our Community Development Representatives, a summary of that conversation covering their current solution, needs, timeframe, and interest. From this we derive scores and recommendations, including our TruSQL™ score, that help a client decide whom to contact and how. We deliver this information to the client whose offering matches the professional's stated need, under a contract that limits the client's use of it to that purpose.
CRM integrations.A client may connect its own Salesforce or HubSpot account to Rover. Rover acts on the client's instructions and only with the authorization the client's own administrator grants:
- Delivered-lead outcomes.Rover reads the status of the leads it delivered to the client (for example sale, lost, opportunity, or abandoned) so the client can see outcomes in Rover and so we can improve our matching. Rover does not read other records and does not write to the client's CRM.
- The Rover Insights panel. If the client adds our component to its Salesforce or HubSpot record pages, the name, email address, and record type of the record a user is viewing are sent to Rover to look up the matching Rover contact or prospect. These values are used for the lookup and are not stored.
- Authorization tokens. The tokens Salesforce or HubSpot issues when the client connects are stored encrypted and are deleted, and revoked at the provider, when the client disconnects.
- Agent conversations. If a client chooses to let its Salesforce Agentforce agents be reached from Rover, the messages exchanged in that conversation and its identifiers are held for the life of the conversation and then expire.
We also offer clients a way to export delivered leads to their CRM and to their email or marketing tools. When a client does this, the exported fields are the ones listed under lead intelligence above.
5. How we use information
- To provide the platform, the lead intelligence services, and the integrations described above.
- To respond to your enquiries and demo requests.
- To introduce professionals to clients whose offerings match the need they expressed to us.
- To score, enrich, and improve the quality of the information we deliver, including by reading delivered-lead outcomes.
- To keep accounts and data secure, detect abuse, and audit access.
- To measure and improve the website and the platform.
- To send marketing communications about Rover where permitted, with an unsubscribe in every message.
- To meet legal obligations and enforce our agreements.
6. Who we share information with
- Our clients.We share lead intelligence with the client whose offering matches the professional's expressed need, as described in section 4.
- Our sub-processors. Service providers that host, store, or process information on our behalf under written data protection terms. They include Amazon Web Services and Upsun (Platform.sh) for hosting, Snowflake for data storage, Clerk for identity, and Salesforce or HubSpot when a client connects its own account. The current list is on our sub-processors page.
- Legal and corporate. When required by law, to protect our rights, or as part of a merger, acquisition, or sale of assets, with notice where the law requires it.
We do not sell personal information.
7. How long we keep information
- CRM authorization tokens: until the client disconnects, at which point they are deleted and revoked at the provider.
- Lead intelligence, delivered-lead outcomes, and audit logs:for the length of the client contract, and deleted on the client's request when it ends.
- Platform sign-in sessions: sessions inside Salesforce or HubSpot expire after 30 days without use or on sign out; records of rotated sessions are kept for seven days to detect replay.
- Agent conversation state: until the conversation ends.
- Website form submissions and marketing data: while we have an ongoing relationship with you or your company, and otherwise until you ask us to delete them.
8. How we protect information
All traffic to and from our services uses TLS. CRM tokens are encrypted at rest with keys held in AWS Key Management Service and bound to the record they belong to. Platform sessions are stored as hashes. Application secrets are kept in a managed secrets store. Access to our systems is limited to staff who need it, every API request is checked against the acting organization, and access is logged and monitored with automated alerts. No method of transmission or storage is perfectly secure, and we ask that you report any concern to help@roverinsights.ai.
9. Your rights and choices
You may ask us to tell you what personal information we hold about you, to correct it, to delete it, or to stop using it for marketing. If you are a professional in our lead intelligence data you may also ask us not to introduce you to clients. Depending on where you live, including under the GDPR, the UK GDPR, and the California Consumer Privacy Act, you may have additional rights, such as the right to object to or restrict processing, to data portability, and to complain to a supervisory authority. To exercise any of these rights, email legal@roverinsights.ai. We will verify your request and respond within the time the applicable law allows. We will not treat you differently for exercising your rights.
If you are a platform user at one of our clients, or a person in a client's CRM, the client controls that data and your request may be referred to them. We will help them respond.
10. International transfers
We are based in the United States and our systems run there. If you access our services or we process your information from outside the United States, your information is transferred to and processed in the United States, where data protection laws may differ from those in your country. Where the law requires, we rely on appropriate safeguards for such transfers.
11. Children
Our website and services are for businesses and the professionals who work for them. They are not directed at anyone under 18, and we do not knowingly collect personal information from children.
12. Changes to this policy
We update this policy when our practices change. The date at the top shows the latest revision. For material changes we will give notice on the website or, for platform users, in the platform or by email.
13. Contact us
Privacy questions and requests: legal@roverinsights.ai. Support and security reports: help@roverinsights.ai. Mail: Forge Intent LLC, 116 Research Dr., Bethlehem, PA 18015, United States.