NEWOptimal Business Solutions (OBS), maker of AMT ERP, partners with ROI-AI.Read the announcement

Privacy Policy

toPod, Inc. d/b/a ROI-AI. Effective Date: April 21, 2026.

Last updated August 3, 2026. Section 8 revised to accurately describe our use of analytics.

1. Introduction

This Privacy Policy describes how toPod, Inc., a Delaware corporation doing business as ROI-AI ("ROI-AI," "we," "us," or "our"), collects, uses, and protects information when you use the IEEPA CAPE CSV service at roiaione.com ("Service").

2. Information We Collect

2.1. Account Information

When you create an account, we collect your name, email address, and organization name. Authentication is handled by Clerk, a third-party identity provider.

2.2. Uploaded Documents

You upload 7501 Entry Summary PDFs, which may contain import transaction details, HTS codes, customs valuations and duty amounts, vendor and importer information, and entry numbers and dates.

2.3. Generated Data

We create CAPE Declaration CSV files derived from your uploaded documents.

2.4. Usage Data

We collect basic usage information such as login timestamps and file upload activity for service operation purposes.

3. How We Use Your Information

3.1. Provide the Service: Extract tariff data from your documents and generate CAPE CSV files.

3.2. Communicate with you: Send invoices, service updates, and respond to inquiries.

3.3. Improve our extraction pipeline: We may use aggregated, anonymized data to improve the accuracy and performance of our data extraction technology. No individually identifiable document data is used for this purpose without your consent.

4. What We Do Not Do

4.1. We do not sell your data to third parties.

4.2. We do not share your documents or extracted data with other customers.

4.3. We do not use your data for advertising.

5. Data Storage and Security

5.1. All data is stored on AWS S3 in US regions.

5.2. Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

5.3. Access to customer data is restricted to authorized ROI-AI personnel on a need-to-know basis.

6. Data Retention

6.1. Uploaded documents are deleted from our systems after payment is received for the completed service engagement, or at any time upon your request to ieepa@roiai.finance.

6.2. Generated outputs (CAPE CSV, extraction report, companion sheet) are retained for 30 days after delivery to allow for corrections or re-delivery, then deleted.

6.3. You may request early deletion at any time by contacting us (see Section 10).

7. Third-Party Services

7.1. Clerk handles user authentication. Clerk receives your email and name for login purposes.

7.2. AWS is our infrastructure provider. Data is processed and stored on AWS services.

7.3. Mercury is used for payment processing on ACH invoices.

7.4. Google Analytics 4 (Google LLC) is used for website analytics across roiaione.com. It receives your IP address, pages viewed, referring site, device and browser information, and the interaction events described in Section 8.

7.5. PostHog (PostHog Inc., US cloud) is used for product analytics on roiaione.com. It receives page views and interaction events. We configure it to create an identified user profile only for signed-in users.

7.6. RB2B (Retention.com, Inc.) is used on roiaione.com to identify business visitors. Unlike the analytics services above, RB2B does not only measure behaviour in aggregate: it attempts to resolve an anonymous visit into a named individual. It receives your IP address, the pages you viewed, and technical information about your device and browser, and matches these against its own third-party data sources. Where a match is found, we may receive that person’s name, employer, job title, professional profile and work email address. RB2B states that it performs this resolution only for visitors in the United States; the script runs for all visitors, so data is transmitted to RB2B regardless of whether a match results.

8. Cookies and Analytics

8.1. Authentication. Clerk sets cookies that are strictly necessary to keep you signed in and to protect your session. The Service does not work without them.

8.2. Analytics. We use Google Analytics 4 (measurement ID G-P5B05YBWGK) across all pages of roiaione.com, including this one. Google Analytics sets cookies and collects your IP address, the pages you view, the site that referred you, and your device and browser information. We also use PostHog for product analytics, which sets cookies and records page views and interactions.

8.3. What we measure. Beyond page views, we record specific interactions so we can tell which parts of the site are useful. These include: submitting the recovery assessment form, booking a demo, subscribing to the newsletter, downloading the trust packet, clicking a resource on the deductions hub, clicking an onward link on a retailer dispute guide, clicking a link within an explainer guide, viewing pricing, and starting or completing the calculator.

8.4. What we do not do. We do not use these cookies for advertising, we do not run advertising or retargeting pixels, and we do not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law.

8.5. Visitor identification. Separately from the analytics described above, we use RB2B (Section 7.6) on roiaione.com to identify business visitors to our marketing pages. This is used for business-to-business sales outreach: it may tell us that a named person at a named company visited particular pages. It is not used on the signed-in Service, and it is not used for advertising or retargeting.

8.6. Your choices. You can block or delete these cookies in your browser, or install Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout. Blocking analytics cookies does not affect your ability to use the Service. Blocking the authentication cookies in 8.1 will prevent you from signing in. To opt out of the analytics and visitor identification described in this section for this browser, append ?noanalytics=1 to any roiaione.com URL; your choice is remembered in that browser. Standard tracker-blocking extensions also prevent these scripts from loading.

9. Your Rights

You may request:

  • Access to the personal data we hold about you
  • Correction of inaccurate data
  • Deletion of your data and account
  • A copy of your uploaded documents

We will respond to requests within 30 days.

10. Contact

For privacy inquiries, data deletion requests, or questions about this policy:

toPod, Inc. d/b/a ROI-AI
San Francisco, CA
pouya@roiai.finance

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. The effective date at the top of this page indicates the latest revision.