Privacy Policy

1. Scope

This policy covers the Roveflow marketing website (roveflow.com) and the Roveflow planner application (app.roveflow.com), together the "Service".

2. What we collect and why

a) When you join our updates list (newsletter)

• Data: email address, signup source, timestamp.
• Purpose: to send product updates and beta announcements.
• Legal basis: consent (Art. 6(1)(a) GDPR). You may unsubscribe at any time.

b) When you use the planner as a guest

• Your trip data (trip names, days, activities, markers, notes, attachments you add) is stored locally in your browser (localStorage) and is not sent to our servers unless you create a share link.
• If you create a share link, the trip is synced to our servers with a server-generated session id, a share token, and a 48-hour expiry. After expiry it is deleted/inaccessible.
• Legal basis: consent / performance of the service you requested (Art. 6(1)(a)/(b)).

c) When you register an account

• Data: email and authentication credentials handled by our auth provider (Supabase), plus the trip data you choose to save. Registered trips are stored without expiry until you delete them or your account.
• Legal basis: performance of a contract (Art. 6(1)(b)).

d) When you contact us

• Data: your email and message content.
• Purpose: to respond to your request. Legal basis: legitimate interest (Art. 6(1)(f)).

e) Analytics & security

• We use Plausible Analytics, a cookieless, privacy-friendly analytics tool that does not track you across sites and does not collect personal data or use cookies.
• We use Cloudflare Turnstile to protect forms from bots.
• We use Sentry to capture technical errors and Vercel Analytics for performance metrics.
• Legal basis: legitimate interest in operating and securing the Service (Art. 6(1)(f)).

3. Cookies

The Service does not use tracking or advertising cookies. We use only strictly necessary cookies/local storage (e.g. your app session and your local trip data). See our Cookie Policy for details.

4. Data location & international transfers

The Service is hosted in the European Union. We host with Vercel (EU region) and store data with our database and authentication providers. We aim to keep data within the EEA; where any sub-processor processes data outside the EEA, we rely on appropriate safeguards (e.g. Standard Contractual Clauses).

5. Sub-processors

We share data with the following processors strictly to operate the Service:

A current list is available on request at hello@roveflow.com.

6. Retention

• Newsletter: until you unsubscribe.
• Guest shared trips: deleted 48 hours after creation of the share link.
• Local guest trips: stored in your browser until you clear them; we have no access.
• Registered accounts: until you delete the trip or your account.
• Contact messages: up to 12 months, then deleted.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights, email hello@roveflow.com. You also have the right to lodge a complaint with your local supervisory authority.

8. Children

The Service is not directed to children under 16. We do not knowingly collect their data.

9. Changes

We may update this policy. Material changes will be announced on this page with a new "Last updated" date.

10. Contact

Roveflow — Italy — hello@roveflow.com.