Privacy
Work contact details (name, agency, office area, role, work email, work mobile) from real estate agency and network websites.
Agents: removing yourself
Any agent can be removed from the list at any time, no reason needed, on the remove-me page. We action removals promptly and keep a note of the request so the row is not re-added on the next refresh.
Buyers
We take your email to send your file, your sample and your receipt. We do not sell buyer details or add you to a marketing list.
Page counts
When a page on this site loads, we count it: the page, the kind of site that sent the visit (for example a search engine or ChatGPT, never the full address) and any campaign tag in the link. No cookies, no IP address, nothing that identifies you. We only look at the totals.
The Agent Check app for Pipedrive
What we receive. When a panel opens, Pipedrive tells us which company, user and person or organization it is for. It does not send the contact's details, so our server reads that person's email addresses (or the organization's people's addresses) from the company's Pipedrive for that one check, looks them up in our agent files and then discards them.
What we keep, and for how long. The company's Pipedrive connection, with its refresh token encrypted, for as long as the app is installed. Daily lookup counts and monthly tagging counts, numbers only. While a tag job runs, the ids of the people selected for it and the job's progress; the ids are deleted when the job ends. We never keep contacts' emails, names, phone numbers or Pipedrive ids after a check, and never log them.
What we never do. We do not email anyone in your Pipedrive, sell or share your data, or build any list of who is in whose CRM.
Deletion. When the app is uninstalled, everything we hold for that company is deleted at once. You can also email us to have it deleted.
Where it runs. On Netlify (hosting and storage) for getrosters.com. Payments for Pro go through Stripe.
Agents. Anyone removed through the remove-me page is left out of Agent Check results too.
The Agent Check add-on for Google Sheets
What leaves Google. When you press Check, the add-on sends our server a short fingerprint (hash) of each email you check, never the email itself. We look it up and keep nothing. The fingerprint is the first 8 bytes of a SHA-256 hash of the address in lower case, worked out inside your Google account. Your emails, names and other cells never leave Google.
What we receive with it. A Google sign-in token, signed by Google, that names your Google user by an id. Because Google adds basic profile access to every Marketplace app, the token may also carry your Google account's email address. We check the signature and turn the id into our own id for you with a keyed hash. We never store or log your email address or name.
How we protect your data
Your sheet stays in Google. The add-on asks Google for access to the spreadsheet you have open (not your Drive or other files), its sidebar, and your sign-in. It reads the open sheet inside your Google account to find the email column and write the results back. Nothing from the sheet leaves Google except the fingerprints.
Encrypted in transit. The add-on talks to getrosters.com only over HTTPS (TLS 1.2 or newer). The site sends a Strict-Transport-Security header and moves any plain http request to https. Checks and plan lookups need a Google sign-in token issued for this add-on, and our server checks Google's signature on every one.
Encrypted at rest. The one record we keep per Google user is stored in Netlify Blobs, the storage of the Netlify hosting that runs getrosters.com, which encrypts stored data with AES-256. The record is filed under a keyed hash (HMAC with SHA-256) of your Google user id, not the id itself, and it holds no email address, name or sheet content.
What the record holds, and for how long. Today's number of checks and the minute and number of your latest requests (to stop abuse), both replaced as you use the add-on, and, if you buy Pro, the date it runs to and the payment's reference. We keep the record until 30 days after your last use, or for Pro until 30 days after it ends if that is later, then delete it automatically. We do not store the fingerprints you send, the results, or anything from your sheet, and the add-on's server code logs only how many fingerprints a request had and the plan.
Who can access it. Only GetRosters, and Netlify as the hosting provider that processes it for us. We never give anyone else access. The secret keys the server uses (for the keyed hash and for payments) are kept in the host's private settings, never in the add-on or in the site's code.
Payments. Pro is paid on Stripe's checkout page. Card details go to Stripe and never reach us.
No sale, no AI training. We do not sell or share your data, and we never use what you check to build a list or contact anyone. We do not use Google Workspace data, or anything you check, to develop, improve or train generalized AI or machine learning models.
Deletion. A free record holds no email, name or sheet content, and is deleted automatically after 30 days without use. Removing the add-on stops all checks. Pro buyers can email support@getrosters.com with their payment receipt and we delete their record.
Google user data. GetRosters Agent Check's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The Agent Check app for Attio
What leaves Attio. When you run a check, the app sends our server a short fingerprint (hash) of each email address you check, never the address itself. We look it up and keep nothing. The fingerprint is the first 8 bytes of a SHA-256 hash of the address in lower case, worked out by the app's code running inside Attio. Names, email addresses and every other attribute stay in Attio.
What we receive with it. Your Attio workspace id, so we can count your workspace's checks. We turn it into our own id for your workspace with a keyed hash (HMAC with SHA-256) and store only that.
What the app does in your workspace. It reads the email addresses of the people you check, adds six GetRosters attributes to your People object the first time it runs, and fills them in with the result. It does not read or change anything else.
Encrypted in transit and at rest. The app talks to getrosters.com only over HTTPS (TLS 1.2 or newer), with a key that lives in Attio's encrypted app settings, never in the app's code. The one record we keep per workspace is stored in Netlify Blobs, which encrypts stored data with AES-256.
What the record holds, and for how long. Today's number of checks and the minute and number of your latest requests (to stop abuse), and, if you buy Pro, the date it runs to and the payment's reference. We keep the record until 30 days after your workspace's last use, or for Pro until 30 days after it ends if that is later, then delete it automatically. We do not store the fingerprints you send or the results, and the server logs only how many fingerprints a request had and the plan.
Who can access it. Only GetRosters, and Netlify as the hosting provider that processes it for us. Pro is paid on Stripe's checkout page; card details go to Stripe and never reach us. We do not sell or share your data, never use what you check to build a list or contact anyone, and do not use it to train AI or machine learning models.
Deletion. Uninstalling the app stops all checks; the GetRosters attributes stay in your workspace until you delete them. Our record holds no email address, name or record content, and is deleted automatically after 30 days without use. Pro buyers can email support@getrosters.com with their payment receipt and we delete their record.
Questions: hello@getrosters.com.