Privacy
Last updated: October 2026
Introduction
RotaLabs respects your privacy. This document describes how we handle data across our products and institutional site.
Data we collect
We may collect anonymous usage data (analytics), account data when you authenticate, and information you voluntarily provide in forms.
Payments
Subscriptions are charged by Stripe, which receives your name, email, billing address, tax ID (CPF/CNPJ) when provided and card details. RotaLabs only keeps the Stripe identifiers, the plan and the subscription status, for the period required by tax law.
Rota.Rank
In Rota.Rank we process the data of the projects you add (site URL, audit results and keywords). If you connect Google Search Console or Google Analytics, we store the authorization encrypted and read metrics from those accounts through Google APIs, only to display them in your dashboard; you can disconnect at any time under Connections. We keep the 6 most recent audits of each project. Archived projects are deleted 90 days after archiving. If the subscription is cancelled and the account goes 90 days without using Rota.Rank, the Rota.Rank project data is deleted. In the free check-up (no account), we keep the analyzed domain, the homepage analysis summary and a salted hash of the IP (not the IP) for 30 days to limit abuse; the request goes through the Cloudflare Turnstile bot check, which does not use tracking cookies.
Contact form
When you submit the form at /contact, we store your name, email, company (if provided), project type, message, language, source page, the date and version of the privacy notice you accepted, and a hash of your IP (salted, never the IP itself). We use this data only to answer your business inquiry, based on your consent and pre-contractual steps. The message reaches the team by email (Resend) and you get a confirmation. The form goes through the Cloudflare Turnstile anti-bot check, which does not use tracking cookies. The data is kept for up to 12 months and then deleted automatically; you can request access or deletion earlier through the channels below.
Subprocessors
We use these providers to run our services: Hostinger (hosting), Neon (database, in São Paulo), Cloudflare (DNS, CDN, Turnstile bot check on the free Rota.Rank check-up and the contact form, and encrypted backups), Resend (email), Stripe (payments), Google (login, website Google Analytics with consent, and the Search Console and Analytics APIs in Rota.Rank) and GitHub (login and automation). Some of them process data outside Brazil.
Contact
For privacy questions, reach out through official RotaLabs channels.