Privacy Policy

What personal data Robovue collects about the people who use it, why, who it’s shared with, how long it’s kept, and your rights.

1. Who we are

Robovue is a trading name of Ryan Spike, a sole trader based in England. Address: 34 Locomotive Way, Gateshead, Tyne and Wear, NE8 3FN, United Kingdom. We are registered with the Information Commissioner’s Office (ICO) under number C2048022.

For anything in this policy, email contact@robovue.co.uk.

2. Two roles

This policy covers personal data we decide how to use: mainly the people who sign in to Robovue and people who contact us. For this data we are the controller.
Run data your bots send us (run reports, error messages, payloads, screenshots) is our customers’ data. We process it only on their instructions, as their processor. If your details appear in a customer’s bot data, contact that customer first; we will help them respond.

3. What we collect

Your account

Your email address and password. The password is held by our sign-in provider, AWS Cognito; we never see it.
Your display name and time zone, if you set them. The time zone is only used to show times in emails.
Your workspace, your role in it (Admin or Member), and when you joined.
Invitations: the invitee’s email address, who invited them, and when.

How you use the product

Your settings: alerts you’ve muted for yourself, your table preferences (such as which columns you show and how you sort), whether you’ve hidden the setup checklist, and which bots you own.
A record of some actions, tied to your user ID: who archived a bot, who changed a run’s failure category, who rotated a credential, and which alert emails were sent to you and when.

When you contact us

Feedback sent from the app (your email address, subject and message), and anything you email to contact@robovue.co.uk.

Billing

Payments are handled by Link, Stripe’s reseller service. Link is the seller of record for each payment, and collects your payment details and billing address itself, under its own privacy policy. We store only Stripe’s customer and subscription IDs, your plan and your billing status. We never see or store your card details.

Technical data

Cloudflare, which sits in front of our site, and our own servers process IP addresses to deliver the service and protect it from abuse.
Application logs record errors and requests and are kept for 30 days. They identify you by an internal ID, and sometimes by your email address.
Error reports sent to Sentry, our error-tracking provider, contain technical details of the failure. We don’t send it personal details by default.
Delivery log. Each workspace’s delivery log records the requests its bots send, so the customer can see why one was rejected.
- For a rejected request it keeps only the sender’s network: the first three parts of an IPv4 address, or the first 48 bits of an IPv6 one. Never the full address.
- For an accepted request it keeps no network address at all.
- Entries are deleted after 7 days at most, sooner once the log reaches its size limit, and immediately when the workspace is deleted.

4. Why we use it

To provide the service: your account, the alerts you’ve set up, invitations, billing, and service emails (trial ending, payment failed, plan limits, workspace deleted). Lawful basis: contract.
To keep the service safe and working: security, abuse prevention, rate limiting and error tracking. Lawful basis: legitimate interests.
To answer feedback and support requests. Lawful basis: legitimate interests.
To keep records the law requires, such as tax records. Lawful basis: legal obligation.

We don’t sell personal data or use it for advertising. We don’t make automated decisions about you that have legal or similarly significant effects.

5. Cookies and browser storage

We use no advertising or analytics cookies, and neither the app nor this site loads third-party scripts. Everything we store in your browser is either needed for the service to work or remembers a choice you made:

.AspNetCore.Cookies (app): keeps you signed in. Lasts 8 hours, renewed while you’re active.
.AspNetCore.Antiforgery.* (app): protects forms against cross-site request forgery. Deleted when you close your browser.
Two short-lived sign-in cookies (app): .AspNetCore.Correlation.* and an OpenID Connect nonce. Used only while you sign in, and removed once it completes.
rv_tz (app): your browser’s time zone name, such as Europe/London, so pages show times in your time zone. Lasts 1 year.
Cookies set by AWS Cognito on its sign-in pages.

We share personal data only with:

the providers that run the service for us, listed below, under contracts that require them to protect it;
Slack, only if you connect it, which then receives alerts in the channel you chose;
anyone the law requires us to disclose it to.

The providers:

Amazon Web Services (London, UK): hosting, the database, file storage, sign-in, email and logs.
Cloudflare: DNS, security and delivery for this site and the app.
Stripe, including Link, its reseller service: subscriptions and billing. Link is the seller of record for payments.
Sentry: error tracking.
Zoho (EU): our contact@ mailbox.
UptimeRobot: uptime checks and the status page. It receives no personal data.

7. Where it’s stored

Account data and customer data are stored in AWS’s London region (eu-west-2). Some providers, such as Stripe, Sentry, Slack and Cloudflare’s global network, may process data outside the UK. Where they do, the transfer is protected as UK data protection law requires: by UK adequacy regulations (including the UK–US data bridge) or by the UK International Data Transfer Addendum.

8. How long we keep it

Your user account: until the workspace is deleted. If an Admin removes you from a workspace, your membership ends at once: your settings (your muted alerts, table preferences and setup checklist choice) are deleted then, and you’re taken off as owner of any bot. Your sign-in stays until you ask us to delete it.
Run history: as long as your plan’s window, then deleted daily. That’s 30 days on Free, 90 days on Team, and no limit on Business.
Run attachments (screenshots and text files): 30 days, or 7 or 14 if the workspace chooses.
Delivery log: 7 days at most.
Application logs: 30 days.
Database backups: 7 days, rolling.
Feedback and support requests: until the workspace is deleted.
Invoices and billing records: as long as UK tax law requires. Stripe holds these.

Deleting a workspace. An Admin can do this from the Account page. It removes all of the workspace’s data: its bots, runs, attachments, settings, connections, notifications, members and invitations. It also cancels the subscription and deletes every member’s sign-in. The deleted data is gone from our backups within 7 days.

9. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form. To exercise any of these, email contact@robovue.co.uk. We’ll reply within one month.

You can also complain to the ICO at ico.org.uk or on 0303 123 1113, though we’d appreciate the chance to put things right first.

10. Security

Data is encrypted in transit (HTTPS only) and at rest.
Our servers can only be reached through our edge provider.
Each part of the system can only access what it needs.

11. Changes to this policy

We’ll post any changes on this page. If a change is significant, we’ll email workspace Admins before it takes effect.

Last updated: 2026-10-17.