Privacy policy
Two products, two different stories. SMS Blaster runs on your own computer, so most of your data never leaves it. LOI Blaster is a hosted web app, so your data does sit on our server. This page says exactly which is which.
Last updated: 31 July 2026
What stays on your computer
SMS Blaster is a Windows desktop app. Here is the split, line by line.
Never sent to us
- Your contacts and every list you import
- Every message you send and every reply you get
- Campaigns, A/B tests, lead statuses and notes
- Delivery analytics, engagement scores and cost tracking
- Your Twilio or Telnyx, OpenRouter and GoHighLevel credentials, encrypted at rest
All of it lives in a SQLite database on your machine. The interface binds to 127.0.0.1, so it is reachable from that PC and nowhere else.
The short list
- Your licence key
- A hardware fingerprint, used to bind that licence to one device
- Periodic activation checks, so we can tell an active licence from a cancelled one
- Anything you choose to email us
Message content does not pass through our servers. It goes from your PC straight to your own Twilio or Telnyx account.
Who this covers
RoliOh is an independent software business. It is not a registered company anywhere. We make two products:
- SMS Blaster — a Windows desktop app that runs on your own PC. Currently in private beta.
- LOI Blaster — a hosted web app at loi.rolioh.com, live now.
This policy covers both products and the marketing site at rolioh.com. Where the two products differ, we say so instead of writing one vague paragraph that covers both.
The short version
- SMS Blaster keeps your contacts, messages and analytics on your own computer. We receive your licence key, a device fingerprint and activation checks.
- LOI Blaster is hosted. Your account email, a hashed password, encrypted inbox tokens, the lead lists you upload and your sending logs sit on our server.
- We do not sell personal data or lead lists. Not to brokers, not to partners, not to anyone.
- We do not use your lead data for our own marketing.
- No advertising cookies and no cross-site tracking on rolioh.com.
- Want your data, or want it gone? Email support@rolioh.com.
SMS Blaster: what stays local
SMS Blaster installs on your Windows PC and stores everything in a local SQLite database. Contacts, message history, campaigns, lead statuses, engagement scores, delivery rates and cost tracking are all rows in that file, on your drive. The app's interface is bound to 127.0.0.1, which means it answers only to the machine it is running on.
Messages go out through your own Twilio or Telnyx account. You connect your carrier credentials, the app talks to your carrier, and carrier charges are billed to you by the carrier. RoliOh takes no markup and never sees the message content.
Your credentials for Twilio or Telnyx, OpenRouter and GoHighLevel are encrypted at rest on your machine using Fernet encryption.
What the licence service receives
To check that a licence is valid, the app sends your licence key and a hardware fingerprint to us, then re-checks periodically. The fingerprint exists for one reason: it ties one licence to one device so a key cannot be shared endlessly. It is not a contact record and it carries no campaign data.
Third parties you connect yourself
Two optional features send data out under your accounts, not ours. AI copywriting sends your prompt to OpenRouter using your own API key. GoHighLevel sync pushes inbound replies into your own GoHighLevel account as tagged leads. Those are your contracts with those companies, and their privacy terms apply to that traffic.
The trade-off, stated honestly
Local-first cuts both ways. Because we never hold your SMS Blaster data, we cannot restore it. If the drive dies or the database file is deleted, that data is gone. Back up your own machine.
LOI Blaster: what we store
LOI Blaster is a web app, so this data does live on our server. Here is the whole list.
| Category | Examples | Why |
|---|---|---|
| Account | Email address, password stored as a hash, trial and subscription status | Sign you in, run the 14-day trial and the $10/month subscription, answer support mail |
| Connected inbox | OAuth tokens for your Gmail or Outlook account, stored encrypted, plus the sending address | Send letters of intent from your own mailbox instead of a shared relay |
| Lead lists you upload | Rows from your MLS CSV: listing agent name and email, property address, list price, listing details | Underwrite the three offers and address each letter to the right agent |
| Offer output | The cash, seller finance and subject-to numbers generated per listing, including deals flagged as underwater and held | So you can review and edit offers before anything goes out |
| Sending logs | Which letter went to which agent, timestamp, send status, unsubscribe requests | Enforce the 40 sends/day cap, honour unsubscribes as CAN-SPAM requires, and debug failed sends |
| Support mail | The email you send us and our reply | Actually help you, and remember the thread next time |
One honest note: to fix a support problem we can look at the account data above, including your uploaded lists. We do it when there is a problem to fix, not for browsing.
What we never do
- We never sell, rent or trade personal data or lead lists. There is no data-broker side business here.
- We never use your lead data for our own marketing. The agents and owners in your CSV do not end up on a RoliOh list, and they are never shared with another customer.
- No advertising cookies and no cross-site tracking. No ad pixels, no retargeting tags, no third-party profiles built from your visit.
When you message us
The contact form on this site, and the early-access form on the SMS Blaster page, send us the following: your name, your email address, the topic you picked, your message, the page you submitted from, and the IP address the submission came from. The IP address is kept for spam prevention only.
Those submissions are stored on our server so nothing gets lost if email delivery fails, and a copy is emailed to us so we can reply. We use them to answer you and, if you asked for SMS Blaster beta access, to send you the installer and answer your setup questions. We do not add you to a marketing list, and we do not pass any of it to anyone else. Ask us at support@rolioh.com and we will delete your submission.
Website analytics
rolioh.com uses no analytics or tracking scripts at all today. If that changes we will say so here first, and it will be privacy-friendly aggregate analytics only: page views, referrers and rough country. No advertising cookies, no cross-site tracking, no individual profiles. The cookies the LOI Blaster app sets are functional ones that keep you signed in.
Service providers we rely on
- Email delivery for account mail: sign-in and password messages, receipts and support replies.
- Hosting for the LOI Blaster web app and the licence activation service.
- A payment processor for the LOI Blaster subscription. Card details are entered with the processor. We see whether a subscription is active, not your full card number.
- Your own accounts: Twilio or Telnyx for SMS, OpenRouter for AI copy, GoHighLevel if you sync. You hold those accounts, you pay those bills, and their privacy terms govern that data.
We do not name our hosting or email vendors here, because vendors change and a stale name helps nobody.
Security
- Traffic to rolioh.com, the LOI Blaster app and the licence service is encrypted with TLS.
- LOI Blaster passwords are stored as hashes. Inbox OAuth tokens are stored encrypted.
- SMS Blaster credentials are encrypted at rest on your machine, and the app's interface listens on 127.0.0.1 only.
- SMS Blaster's storage is local-first by design. Data we never hold cannot be taken from us.
No system is perfect, and this one is not either. For SMS Blaster in particular, the security of that database is the security of your PC: disk encryption, a screen lock, and who else has an account on that machine.
Data retention and deletion
LOI Blaster
We keep your account data while the account is open. Email support@rolioh.com from the address on the account and ask us to delete it. We remove the account, the uploaded lead lists and the stored inbox tokens.
Two things survive deletion on purpose. Unsubscribe records are kept so an agent who opted out stays opted out, which is what CAN-SPAM expects. Basic billing records are kept for accounting.
SMS Blaster
We cannot delete what we never received. Your contacts and messages go away when you delete the local database file or uninstall the app. To have your licence activation record removed, email us and we will deactivate and delete it.
Your rights
For data we actually hold, you can ask us to:
- tell you what we have,
- correct anything wrong,
- export it to you, or
- delete it.
Email support@rolioh.com from the address on your account so we can tell it is you. We aim to reply within 30 days.
If you are in the UK or the EU, you may have further rights under GDPR, including objecting to or restricting processing, portability, and complaining to your data protection authority. California residents may have additional rights of access and deletion, and a right to opt out of the sale of personal information. We do not sell personal information, so there is nothing to opt out of. This is not legal advice.
Children
These are business tools for real-estate investors. Both products are for people aged 18 or older, and we do not knowingly collect data from anyone under 18. If a minor's data reached us, email us and we will remove it.
Changes to this policy
When this policy changes, we update the date at the top of the page. If a change materially affects how we handle your data, we will email active accounts rather than quietly swapping the text.
Contact
Questions about privacy, a data request, or a claim you think is wrong on this page: support@rolioh.com. That mailbox is the support channel. There is no phone line and no chat bot. You can also use the contact page.
This page describes how RoliOh handles data. It does not tell you what the law requires of your own outreach. You are responsible for consent, opt-outs and record keeping on your side. The terms of service cover the rest of the agreement.