Privacy Policy

Last updated: 30 July 2026

This describes what Rotalyst actually collects and how it's used today. It's a working draft, not certified legal advice — if you have specific compliance requirements, please have it reviewed by a lawyer before relying on it.

What we collect

  • Your email address, used to sign you in — Rotalyst uses passwordless login (a magic link or one-time code), so we never store a password.
  • The spreadsheets and rota data you choose to upload — sales figures, staff names, hours, and similar operational data.
  • Basic usage analytics (page views), collected in a privacy-friendly way that doesn't use cookies or track you individually.
  • Payment details, if you subscribe to a paid plan — handled entirely by Stripe. Rotalyst never receives or stores your card details.

How we use it

Your uploaded data is used to generate the reports, rotas, and summaries the product shows you — nothing more. Some aggregated figures derived from your uploads are sent to a third-party AI provider (Anthropic's Claude models) to generate the plain-English narrative summaries you see on reports. We don't sell your data, and we don't use it to train AI models.

Where it's stored

Your data lives in a Postgres database (via Supabase), with row-level security enforcing that only your account can read your own data. Everything is encrypted in transit and at rest. We also use Vercel for hosting, Stripe for payments, and Resend for account emails.

The Operations Audit

If you book the paid Operations Audit, we also collect what you tell us on the intake form — things like your average job value, call volume, and how enquiries are currently handled — plus notes from a real test call we place to your business's public phone number as part of the review. This is used only to write your assessment. It isn't sold, shared, or used to train AI models, and you can ask us to delete it once your report has been delivered by emailing enquiries@rotalyst.com.

Cookies

We use one essential cookie to keep you signed in. That's it — no advertising or tracking cookies.

Your rights

You can ask us to access, correct, export, or delete your data at any time by emailing enquiries@rotalyst.com. Deleting your account removes your uploaded data from our systems.

Changes to this policy

Rotalyst is an early-stage product and this policy will evolve alongside it. We'll update the date above whenever it changes.