← Back to Rooteq
Legal

Privacy Policy

Last updated: 2026-06-23

This document is a working draft published ahead of public launch and full business registration. It is provided in good faith and may be updated.

This policy explains what personal data Rooteq collects, why, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Data controller

The controller of your personal data is Rooteq, operated by an individual based in Latvia (business registration pending). For any privacy request, contact rooteq.info@gmail.com.

2. What we collect

  • Account data — name and email address, provided through our authentication provider (and, if you choose Google sign-in, basic profile data from Google).
  • Usage data you enter — the inputs for your calculations: origin location (a point you pick, an address you type, or a cadastre number), log specification, and your transport-cost settings.
  • Subscription & usage records — your plan, monthly calculation count, and any promo code you redeem.
  • Payment data — handled entirely by Stripe. We receive a payment status and subscription identifiers; we never receive or store your card details.
  • Technical data — standard server logs and a session stored in your browser to keep you signed in and remember preferences.

3. Why we use it (legal bases)

  • To provide the Service and your account — performance of a contract.
  • To process subscriptions and prevent abuse — contract and legitimate interests.
  • To keep records required by law (e.g. billing) — legal obligation.
  • To respond to your messages and support requests — legitimate interests.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Service providers (processors)

We share the minimum data needed with trusted providers that run the Service:

  • Clerk — authentication and account management.
  • Stripe — subscription billing and payments.
  • Google Maps Platform — geocoding, distance, and map rendering; Google sign-in if you use it.
  • Vercel — frontend hosting and delivery.
  • Fly.io — backend application and database hosting (EU region).

Each acts under its own terms and data-processing safeguards. Public map and forestry layers are retrieved from Latvia’s state forest geoservices; those requests do not include your identity.

5. International transfers

Some providers (e.g. Stripe, Google) may process data outside the European Economic Area. Where they do, they rely on recognised safeguards such as the EU Standard Contractual Clauses.

6. Retention

We keep account and usage data for as long as your account is active. If you close your account, we delete or anonymise personal data within a reasonable period, except where we must retain certain records (e.g. billing/tax records) to meet legal obligations.

7. Your rights

Under the GDPR you can request to:

  • access the personal data we hold about you;
  • correct inaccurate data or complete incomplete data;
  • delete your data (“right to be forgotten”);
  • restrict or object to certain processing;
  • receive your data in a portable format.

To exercise these, email rooteq.info@gmail.com. You also have the right to complain to Latvia’s supervisory authority, the Data State Inspectorate (Datu valsts inspekcija).

8. Cookies and local storage

We use only what’s necessary to run the Service: a sign-in session and small browser-stored preferences (such as your transport-cost settings). We do not use advertising or cross-site tracking cookies.

9. Children

The Service is intended for business users and is not directed at anyone under 18.

10. Changes

We may update this policy; the “last updated” date above reflects the latest version. Material changes will be highlighted in-app where appropriate.