Privacy Policy

ROAVAA, operated by Prisca Akoua, is the controller responsible for your personal data.

You can reach us for any privacy question or request at privacy@roavaa.com.

We collect only the data needed to provide the service:

• Account data: your name, email address and password (stored encrypted).
• Business data you enter: customers, vehicles, appointments, work orders, invoices and messages.
• Payment data: handled by our payment provider; we never store full card numbers.
• Technical data: IP address, device and browser type, and usage logs, for security and reliability.

We process your data to perform our contract with you (providing the service), on the basis of our legitimate interest (securing and improving the service), to comply with legal obligations (e.g. accounting), and on the basis of your consent where required (e.g. non-essential cookies).

We do not sell your data. We share it only with service providers who process it on our behalf under a data processing agreement:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• Stripe — payment processing.
• Anthropic — the AI assistant that helps process your requests.

Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

We keep your data for as long as your account is active, and afterwards only as long as needed to meet legal obligations or resolve disputes. You can ask us to delete your account and data at any time.

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your data, and the right to data portability.

To exercise any of these rights, contact privacy@roavaa.com. You also have the right to lodge a complaint with your local data protection authority (for the Netherlands, the Autoriteit Persoonsgegevens).

We apply appropriate technical and organisational measures — including encryption in transit, access controls and row-level data isolation — to protect your data.

We use only the cookies strictly necessary to run the service (for example to keep you signed in). See our Cookie Policy for details.

We may update this policy from time to time. The date above shows when it was last changed; material changes will be communicated in the app.