Privacy Policy

• Account details — your email address or username, your name if you provide one, and your password (stored hashed by our authentication provider, never visible to us).
• Workspace details — your workspace name, its members, and each member's role.
• Token activity — a log of each token transaction: what kind of action it was, how many tokens it cost, which member performed it, and when.
• Payment records — a Stripe customer reference and the fact that a purchase completed. Card numbers go directly to Stripe and never reach our servers.

We do not store the addresses or routes you plan. Your working route — stops, start and end points, and the last calculated result — is kept in your own browser's local storage so a page refresh doesn't lose your work. It stays on your device and is not uploaded to us. Clearing your browser data clears it.

Route history and favorites are the one exception: the planner keeps your workspace's last 10 optimized routes, plus any routes you've starred as favorites, so anyone on your team can reopen one in Google Maps without paying to recalculate it. Each saved entry is just a short label and a Google Maps link — never the individual stop addresses — and it's stored in our database rather than your browser, tied to your workspace, so it's visible to other members of your workspace and reachable from any device you sign in on. Deleting your workspace deletes it.

Our token log records that a route of, say, twelve stops was optimized — not what those twelve stops were.

To search, geocode and route your stops, the addresses you enter are sent from your browser (and, for routing, via our server) to Google Maps Platform. Google processes them under its own privacy policy and Maps Platform terms. If your stop addresses are personal data belonging to your customers, you are the controller of that data and responsible for having a lawful basis to process it.

• Clerk — authentication and account storage
• Supabase — our database (workspaces, members, token ledger, saved route history and favorites)
• Stripe — payment processing and sales tax calculation
• Google Maps Platform — geocoding, routing and map tiles
• Google Cloud Vision — reads the text out of a photo when you use the camera-scan feature to add a stop. The photo itself is sent to Google for that one lookup and is not stored by us or, as far as we control it, by Google beyond what's needed to process the request.
• Vercel — application hosting

We do not sell, rent or trade your personal data, your workspace's data, or your customers' addresses to anyone, for any reason — not to data brokers, not to advertisers, not to anyone else. We do not use your data for advertising, ours or anyone else's, and we do not build advertising profiles from it. The vendors listed above process data only to provide the specific service named next to them, under their own privacy terms and ours, and are not permitted to use it for their own advertising purposes either.

If that were ever to change — it isn't going to, but if it did — it would require a material update to this policy and the re-acceptance prompt described in our Terms of Service, not a silent change.

We use cookies that are strictly necessary to keep you signed in. We don't run advertising or third-party analytics cookies. Local storage is used for your working route and small interface preferences.

Account and workspace data is kept while your account exists. Token ledger entries are kept while the workspace exists, because they're the record your balance is derived from. Payment records are retained by Stripe for as long as tax and accounting law requires.

If you're a workspace admin, you can delete your account at any time from Settings. This deletes the whole workspace — every sub-account, the token balance and the entire ledger — immediately and irreversibly. If you're a sub-account, your workspace's admin removes your access on request; email support@roptimal.app if you can't reach them and want your data erased directly.

Depending on where you live you may also have rights to access, correct, export or restrict processing of your personal data. Email support@roptimal.app and we'll action it.

Roptimal isn't intended for anyone under 16, and we don't knowingly collect data from children.

Privacy questions: support@roptimal.app. See also our Terms of Service.