Privacy Policy

Last updated: July 21, 2026

1. Who we are

Rotiplate B.V. is the data controller for the personal data described in this policy. We're registered in the Netherlands under CoC number 42103064, VAT number NL869743338B01, at Wassenaarstraat 18, 1324VG Almere. You can reach us about privacy matters at info[at]rotiplate.com.

This policy covers https://rotiplate.com and the Rotiplate application at https://rotiplate.app/.

2. Data we collect

We collect a few different kinds of data, depending on how you interact with us:

• Account data: name, email address, and password (stored as a salted hash, never in plain text) when you create a Rotiplate account.
• Workspace content: whatever you and your team enter into active plugins — tasks, documents, calendar entries, manuals, todo items, and invoice details if the Payments plugin is on. This content belongs to you; we process it to run the Service.
• Billing data: your subscription plan and which plugins are active. Card and payment details are handled directly by our payment processor — we don't store full card numbers on our own servers.
• Contact form data: the name, email address, and message you submit through our contact form, used only to respond to you.
• Usage and log data: technical information like IP address, browser type, pages visited, and timestamps, collected automatically to operate and secure the Service.

3. Why we process it

We process this data on the following legal bases under the GDPR:

• Performance of a contract — to create and run your account and workspace, and to bill your subscription.
• Legitimate interest — to keep the Service secure, understand how it's used so we can improve it, and respond to messages you send us.
• Legal obligation — to keep records required by Dutch tax and accounting law.
• Consent — for anything beyond the above, such as optional marketing communications, which we'll only send if you opt in.

4. Who we share data with

We don't sell your data. We share it only where necessary to run the Service, with parties such as:

• Our hosting and infrastructure providers, who store and run the application.
• Our payment processor, to handle subscription billing.
• Email delivery services, to send account and billing notifications.

Each of these processes data under our instructions and is contractually required to protect it.

5. International transfers

We aim to keep data within the European Economic Area wherever possible. Where a provider we use is located outside the EEA, we rely on an adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect your data.

6. How long we keep it

We keep account and workspace data for as long as your account is active. If you close your account, we retain the data for a limited period afterward in case you wish to reactivate, and then delete or anonymize it, except where we're required to keep certain records longer for legal or tax purposes (typically up to seven years for financial records under Dutch law).

7. Cookies

Our marketing site uses only the cookies necessary for it to function, such as remembering that you're logged into the application. The Rotiplate application itself uses cookies to keep you signed in and to remember workspace preferences. We don't use third-party advertising cookies.

8. Your rights

If you're in the EU, the UK, or another jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data, subject to our legal retention obligations.
• Request a portable export of the data you provided to us.
• Object to or request restriction of certain processing.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email info[at]rotiplate.com. If you're not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

9. Children

Rotiplate is a business tool and isn't directed at children. We don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll remove it.

10. Security

We use reasonable technical and organizational measures, including encryption in transit and access controls, to protect your data. No system is completely secure, so we can't guarantee absolute security, but we work to address vulnerabilities promptly when they're identified.

11. Changes to this policy

We may update this policy as our practices or applicable law change. We'll update the "Last updated" date above whenever we do, and for material changes we'll make a reasonable effort to notify active customers directly.

12. Contact us

Questions about this policy or your data can be sent to info[at]rotiplate.com, or by post to Rotiplate B.V., Wassenaarstraat 18, 1324VG Almere, the Netherlands.