rotascale authority and evidence for AI agents See the demo

Privacy

Two different things, and only one of them involves us.

This website collects almost nothing. RotaGrant collects nothing at all, because it runs in your environment and no payload reaches us on any path. Most privacy questions about a vendor do not apply here, and the ones that do are below.

Last updated 14 August 2026.

The website

What you send us
If you email us or submit a form, we hold what you wrote — your address, your name if you gave it, and the message — in order to reply. We keep it while the conversation is live and for as long afterwards as the relationship warrants, and we delete it on request.
Server logs
This site is served by Cloudflare, which records requests — IP address, user agent, the page — for delivery and abuse prevention. We do not join those to anything, do not build profiles from them, and do not use them for advertising.
If you subscribe
Your address is stored by Cloudflare and a confirmation is delivered by Resend. Nothing is sent until you confirm, an unconfirmed address is deleted after seven days, and unsubscribing removes it immediately and without asking you to identify yourself. There is no open or click tracking, so we do not know whether you read anything.
No analytics
There is no analytics script, no session recording, no advertising pixel, no chat widget and no A/B testing on this site. There are no third-party fonts: the type is served from this origin, and the content security policy forbids any other. You can verify all of that from your browser's network tab, which is a better assurance than this paragraph.
Cookies
None for tracking. Your theme choice is stored in localStorage on your own machine and never sent anywhere.

The product

RotaGrant is deployed in your cloud account, your data centre, or airgapped. We are not a processor of your data, because we never receive it: no payload reaches us on any code path, the platform calls no model provider, and the outbound connections a deployment could make are enumerable and disabled by default.

Which means the transfer analysis, the sub-processor list and the retention schedule that consume most vendor reviews are questions about your deployment rather than about us. Where a customer wants a data processing agreement anyway — for the support relationship, or because procurement requires one — we sign one.

Your rights, and how to use them

Where the GDPR or a comparable law applies, you can ask what we hold about you, ask for it corrected, ask for it deleted, object to our processing, or complain to your supervisory authority. Write to dev@rotascale.com and a person will answer. We do not require a form.

This describes what actually happens rather than what a template would say. It is written to be accurate, not to be exhaustive, and it has not been through outside counsel. If you need a formal notice for a procurement file, ask and we will produce one that says the same things in the expected shape.