Privacy policy

Last updated: September 28, 2026

Abistama Solutions OÜ ("we", "our", or "us"), the company behind RotaHog, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our RotaHog application ("RotaHog" or "the Application").

RotaHog is designed to collect as little data as possible. If you have any questions, please contact us at hi@rotahog.com.

Information we collect

We collect the following types of information:

  • Email address (optional): We only collect your email address if you choose to provide it to receive reminders for your rotation. You can use RotaHog without providing an email address.
  • Rotation Data: We collect the information you enter to set up your rotation, such as the task name, schedule details (frequency, start date), and participant names or emails you provide.
  • Anonymous Usage Data: We use Plausible Analytics to collect aggregate, anonymous usage statistics (like page views, browser type, country). This helps us understand how the Application is used and improve it. Plausible does not use cookies and does not collect any personal data.

We do not read data out of third-party services. RotaHog can send information outwards if you ask it to: if you configure a Slack incoming webhook for a rotation, we store that webhook URL and deliver turn reminders through it, so the reminder content reaches your Slack workspace. If you give us a participant's Slack handle so they can be mentioned in those reminders, we store it.

How we use your information

We use the collected information solely for these purposes:

  • To provide and maintain the RotaHog service (displaying your rotation, calculating turns).
  • To send email reminders, if you have provided your email address.
  • To understand usage patterns and improve the Application using anonymous, aggregate data from Plausible Analytics.
  • To respond to your inquiries and provide customer support via email.
  • To comply with legal obligations.

Data sharing and disclosure

We do not sell, rent, or trade your personal information. We only share information in limited circumstances:

  • To Provide the Service: If you opt-in for email reminders, your email address and rotation details are processed by our email delivery system solely for the purpose of sending those reminders.
  • Legal Requirements: If required by law, court order, or other governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred, subject to the promises made in this Privacy Policy.

API and AI assistant access

RotaHog offers a REST API and an MCP server, which let software you choose, including AI assistants such as Claude and ChatGPT, read and change your rotations on your behalf. Both are off until you turn them on. Nothing is shared with any AI provider unless you connect one yourself.

What leaves RotaHog when you connect an assistant

Each call returns only the data that call needs. Across all the available calls, that can include:

  • Rotation details: the task name, its identifying token, how often it repeats, its start date, timezone and reminder settings.
  • Turn details: scheduled dates, status, and who acted on each turn, including turns in the past.
  • Participant details: the names, email addresses and Slack handles of the people in your rotations. Email addresses are included because they are what turn reminders are addressed to.

We do not receive your conversation. We never request or store your prompts, chat history, uploaded files, or any other part of your exchange with an assistant. We see only the arguments of the specific call it makes to us.

Who becomes a recipient of that data

Once you connect an assistant, the company operating it, for example Anthropic for Claude or OpenAI for ChatGPT, receives the data described above and handles it under their privacy policy rather than this one. We have no control over what they do with it. Please read the policy of any assistant before you connect it.

Most of the people in your rotations are not RotaHog users, and connecting an assistant shares their names and email addresses with the provider you chose. You are responsible for having a basis to do that and for telling them if they would not otherwise expect it. If you would rather not share someone's email address, leave their email blank: the rotation works exactly the same, and that person simply receives no reminders.

Credentials and access we store
  • Connector authorizations: when you connect an assistant through our sign-in flow, we store which client you authorized, which permissions you granted, and the resulting tokens. Access tokens expire after one hour, and refresh tokens are replaced each time they are used.
  • Separate permissions: reading your rotations and changing them are two distinct permissions, both shown to you before you approve anything, so you can grant read-only access and withhold the rest.
  • API tokens: tokens you create yourself are stored only as a SHA-256 hash. We cannot recover or re-display a token after you create it.
  • Request metadata: we log metadata such as the time of a request, the IP address it came from and a short prefix of the token used, in order to apply rate limits and detect abuse.

Every connected client and every API token is listed on your API tokens page, and you can revoke any of them at any time. Revoking takes effect immediately, and the assistant loses access with no further action from you.

Data retention and deletion

We retain your rotation data for as long as the rotation is active or until you delete it. You can delete a rotation at any time using the unique editing link provided when you created it (check your confirmation/reminder emails).

If you provided an email address for reminders, you can request its deletion by contacting us at hi@rotahog.com. We will process deletion requests promptly.

Anonymous usage data from Plausible is kept according to their data retention policy.

Your rights

Depending on your location, you may have rights regarding your personal data, such as the right to access, correct, or request deletion of the data we hold about you (primarily your email address, if provided). To exercise these rights, please contact us at hi@rotahog.com.

Security

We implement reasonable technical and organizational measures to safeguard the information we collect. However, please remember that no method of electronic transmission or storage is 100% secure.

Analytics and cookies

As mentioned, we use Plausible Analytics. It's a privacy-focused tool that helps us improve RotaHog without tracking you personally. It does not use cookies. You can view their data policy here.

Changes to this policy

We may update this Privacy Policy occasionally. Any changes will be posted on this page, and the "Last updated" date will be revised. We encourage you to review this policy periodically.

Contact us

If you have any questions about this Privacy Policy, please contact us:

Abistama Solutions OÜ
Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe nt 5, 10145
Estonia
Email: hi@rotahog.com

By using RotaHog, you agree to the collection and use of information in accordance with this Privacy Policy.