Privacy Policy
ROXIUM ("ROXIUM," "we," "us," or "our") operates the ROXIUM client portal at roxium.com (the "Service"), a marketing performance and reporting platform for medical and aesthetic practices. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.
Information we collect
- Account information — your name and email address, used to authenticate you and associate you with your practice.
- Marketing performance data — when you connect a marketing platform (such as Google Ads, Meta, or Google Analytics), we retrieve aggregate performance metrics for that account with your authorization.
- Service content — deliverables, milestones, video production status, and updates your ROXIUM team posts about your engagement.
- Usage data — basic technical information (such as browser type and access times) needed to operate and secure the Service.
Google user data
If you connect a Google account (for example, Google Ads or Google Analytics), you authorize ROXIUM to access, on a read-only basis, aggregate reporting metrics for that account — such as cost, impressions, clicks, and monthly performance segments. We access this data solely to display your marketing performance inside your ROXIUM dashboard.
We do not create, edit, pause, or manage campaigns, budgets, or any account settings, and we do not access personal Google data such as Gmail, Drive, Contacts, or Calendar.
ROXIUM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except as necessary to provide and secure the Service, with your consent, or where required by law.
How we use information
- To provide, maintain, and display your marketing performance dashboards and reports.
- To authenticate you and secure access to your practice's data.
- To communicate with you about your account and the Service.
- To operate, troubleshoot, and improve the Service.
We do not sell your personal information or your marketing data, and we do not use it for advertising or profiling.
How information is stored and shared
We use a small number of trusted service providers ("subprocessors") to run the Service, each acting on our behalf under contractual confidentiality and security obligations:
- Composio — securely stores the authorization tokens for your connected platforms and issues read-only API requests on our behalf. Tokens are encrypted at rest and in transit.
- Supabase — hosts our application database, where your data is isolated per practice using row-level security.
- Cloudflare — serves the web application.
We disclose information only to these providers, to you and your authorized team, or where required by law. We do not otherwise share your data with third parties.
Data retention and deletion
You may disconnect any connected platform at any time from the Connections page in the portal; this immediately stops all future data collection from that platform. You may request deletion of your account and associated data by contacting us at the address below, and we will delete it except where retention is required by law. Disconnecting a platform stops syncing but preserves previously imported reporting history unless you request its deletion.
Security
We protect your information with encryption in transit and at rest, least-privilege access controls, and per-practice data isolation. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.
Children's privacy
The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notifying you.
Contact us
Questions about this policy or your data? Contact us at privacy@roxium.com.