Rota is a small trip-planning site, made and run by one person. This page says what it keeps about you, who else sees it, and how to have it removed. Questions: hello@rotago.app.
What Rota keeps
- Your account: your name, and either your username and your password as a one-way hash (nobody, us included, can read it back), or, if you sign in with Google, Google's id for your account, your email address and the link to your profile photo.
- Your conversations with Rota and what comes out of them: the trips you save (place, dates, plan, budget, tickets, weather), the people you add to a trip and their wishes, expenses, packing lists, forecast alerts, and your votes in a group chat.
- What Rota remembers about you between trips (for example how you like to travel). You can see and forget each of these on your Profile page.
- Safety: sign-in tries are counted per IP address and per username for 15 minutes, and messages per account, to stop password guessing and floods. The counts are then gone.
There are no ads, no analytics and no tracking. Cookies only keep you signed in (for 30 days), remember your language, and hold Google sign-in's state for 10 minutes.
Who sees what
- Your trips and conversations are yours, unless you share them.
- A group chat is seen by everyone who joined it with its invite link, and a trip's read-only link shows its plan to anyone who has the link, until you stop sharing it.
- Your email address is never shown to anyone.
Services Rota uses
- Railway runs the servers and stores the database (in the United States).
- OpenRouter passes your messages, and the trip details Rota needs to answer, to the AI model that writes the answer (currently DeepSeek; when it is busy, another model). These model providers may keep what they receive under their own terms, so please don't write anything you wouldn't want to share.
- LangSmith (by LangChain) records each conversation's steps for a short time, so mistakes can be found and fixed.
- Place, weather, route and currency services (Geoapify, OpenStreetMap's Nominatim, Overpass and OSRM, Open-Meteo, Frankfurter, currency-api and Wikipedia) get place names, coordinates and dates from our server, never who you are.
- Map tiles load straight from OpenStreetMap's servers, which see your IP address the way any website does.
- Google, if you choose to sign in with it (Google's privacy policy).
Nothing is sold, and nothing goes to anyone else.
How long, and deleting it
Your data stays while you have an account. To delete your account and everything in it, or to see or correct what we have about you, write to hello@rotago.app from the email you sign in with, or tell us your username; it is done within 30 days. The server keeps a copy of the database once a day for a week, to recover from accidents, so deleted data is gone from those copies within seven days after that.
Children
Rota is not meant for children under 13, and we don't knowingly keep their data.
Changes
If this changes, the new version is posted here with a new date.