Privacy Notice

What this notice covers

This notice covers the public information pages at rovarihq.com and the early-access request form on them. Workspace signup, member access and payments are currently closed. We will update our notices before opening the app.

Information we use

Cloudflare hosts and secures the website. It processes technical request information, including IP addresses, requested pages, request times, and browser or device information. See Cloudflare's Privacy Policy.

We use Umami at analytics.digitusdata.com to understand page visits and improve our content. Analytics requests include page addresses (without query strings or fragments) and titles, referrers, language, screen dimensions and a pseudonymous visitor identifier. The server also receives network information and can derive browser, device and approximate location information.

The tracker stores its visitor identifier in your browser's local storage rather than using analytics cookies. This can associate visits from the same browser; we do not link it to your name, email or a customer account. We do not configure advertising pixels, Google Analytics or session recordings. See Umami's tracker information.

Early-access requests

The early-access form asks only for your email address. The form says: "We'll email you about Rovari early access and availability. You can opt out at any time." With your request we record the address, the time, the page and form you used, any campaign labels in the page address (such as utm_source), the version of that wording and of this notice. If you choose to add business details, we also record your business type, country, name, business name, current software and what you would like Rovari to help with. A request does not create a workspace or start a trial, and we do not sign you up for a newsletter.

We use this information to reply to you personally about early access and availability, to understand whether Rovari fits your business, and to protect the form from abuse. Requests are stored in a Cloudflare D1 database. Cloudflare Turnstile checks that a person is submitting the form; Cloudflare processes browser and device signals for that check under its Privacy Policy linked above. To limit repeated requests, we keep a keyed hash of your network address, never the address itself, for a short period. A notice of each new request is sent to our contact inbox. Analytics events for the form record only which form was used, never your address or anything you typed.

We delete a request's details 12 months after you submitted it or after we last contacted you, whichever is later, or sooner when you ask. If you opt out, we keep a keyed hash of your address so that a later request does not sign you up again; it does not contain the address itself. Cloudflare keeps database backups for up to 30 days, so deleted details can remain in those backups until they expire.

To opt out or ask us to delete a request, reply to any message from us or email us at the address above. We record opt-outs promptly.

Other information

The site can also store your chosen display theme in your browser. If you email us, we receive the information you send. Our contact inbox uses Gmail; see Google's Privacy Policy. Please avoid sending sensitive member records or payment details by email.

We use this information to deliver and secure the site, understand its use, respond to messages, early-access requests and privacy requests, and meet legal obligations. Where a legal basis is required, these uses serve our legitimate interests in operating the website, responding to correspondence and requests you send us, or an applicable legal obligation. This notice does not replace consent required by law.

Cloudflare, the Umami endpoint and its hosting infrastructure, and Google receive information for those services. Authorized people working for Digitus Data LLC can access relevant statistics and correspondence. We may disclose information when required by law or needed to address abuse or legal claims. We do not sell visitor information or use it for cross-site advertising.

We are based in the United States. Providers may process information in other countries. We have not verified a single hosting country for the analytics instance or the request database and do not promise that information remains in your country.

Retention and choices

We do not currently have a verified automatic deletion deadline for analytics history; it can remain until deleted. Provider logs and backups follow their own retention settings. We keep correspondence as needed to respond and maintain relevant business or legal records. Early-access requests follow the schedule in the section above. Browser preferences and the visitor identifier remain until you change or clear browser storage.

Our Umami configuration respects Do Not Track. You can enable that browser setting or block analytics.digitusdata.com to stop analytics events. The pages remain readable with analytics blocked or JavaScript off. Clearing browser storage removes the local visitor identifier, but does not erase earlier server records. Tracking leaves out the query string and fragment of each page address.

Your rights and contact

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, object to or restrict its use, withdraw consent where we rely on it, or complain to a data protection authority. We will not discriminate for exercising these rights.

Email vdmsmnk@gmail.com or write to our address above. We may need to verify your identity and explain any legal limits on a request. Use the same address to ask for a review of our response. We handle requests and any applicable appeals as required by law.

The site is intended for people evaluating business software and does not invite children to submit personal information. Contact us if you believe a child has sent us personal information.