Privacy policy

This policy explains how Rostavo ("we", "us") handles personal data when you use our software and websites. We are the data controller for your own account and billing details. For everything your agency stores about its staff, its clients and the people they care for, your agency is the controller and we are the processor — which means requests about that data go to the agency, and the agency has the tools to answer them.

What we collect

• Your account: name, email, phone, hashed password, agency details, and payment details handled by our payment provider.
• What your agency enters: staff records including documents, references and background-check status; client and family records; details of the people in their care, which may include children or vulnerable adults; bookings, availability, messages and invoices.
• Technical: server logs, browser and device information, and error diagnostics.

Why, and on what basis

To provide and secure the service (performance of a contract), to meet legal obligations such as keeping financial records, and for our legitimate interest in running and improving the product. Where we need consent — certain optional communications — you can withdraw it at any time.

Who else touches it

We use as few third parties as we can get away with. The list is:

• Hetzner — hosting. Servers in the EU.
• Resend — email delivery.
• Stripe — card payments, where an agency has switched them on.
• Sentry — error reports, so we find crashes before you report them.

That is the whole list. There is no analytics, no advertising, and no tracking pixels. Our webfonts are served from our own servers rather than a font CDN, so loading a page here does not hand your IP address to anyone else. We do not sell personal data, and we never will.

Cookies

Two, both strictly necessary: one keeps you signed in, and one protects forms against cross-site request forgery. Neither is used for advertising or tracking, and there is nothing to opt out of because there is nothing optional. If that ever changes, this page changes with it and you will be asked before anything non-essential is set.

How long we keep it

While your agency's account is active, and afterwards only where the law requires it. Invoices, payouts and the hours behind them are kept for six years as financial records; everything identifying attached to them is removed. Close your account and everything else goes immediately.

Your rights

Under UK and EU GDPR you can ask for a copy of your data, have it corrected, have it erased, object to or restrict how it is processed, and take it elsewhere. In practice:

• If you are a member of staff, a client, or a parent — ask the agency you deal with. They are the controller, and Rostavo gives them a one-click way to export or erase your record.
• If you run the agency — Settings → Data protection inside the app. Download everything as a single file, erase one person's data, or close the account entirely. Erasure destroys documents, messages, notes and the login, and leaves only the anonymous financial rows the law requires us to keep.
• Either way — you can also email us and we will help, or complain to the ICO if you think we have got it wrong.

Children's data

Agencies record information about children in their care — ages, allergies, medical notes, schools, pickup arrangements. That is controlled by the agency, is only ever visible inside that agency's account, and is destroyed in full when the family's record is erased. We process it solely to provide the service to the agency, and for nothing else.

Security

Data is encrypted in transit, access is restricted by role, and each agency's records are isolated from every other agency's at the database level — something we test for deliberately rather than assume. No system is perfectly secure, but nothing here is left to chance.

Contact

Questions or requests: hello@rostavo.com. A person reads these.