Privacy notice

Last updated: 24 October 2026

Rota helps church leaders organise serving teams and services. This notice explains what information we use to run Rota and the choices available to you.

Who is responsible

Rota is operated by Levites Tech Ltd (“Levites”, “we”, or “us”). For privacy questions or requests, email founder@levites.app.

Information we use

• Account details: your name and verified phone number, used to create and secure your account.
• Team details: the teams you join, your team role, the names leaders add, and the verified phone numbers of people who join.
• Rota information: services, roles, assignments, and responses such as accepting or declining an assignment.
• SMS choices and records: whether you have opted in to rota texts, and delivery records needed to send updates and honour opt-out requests. Texts may include the team name, service date, assigned role, and a secure response link. The SMS provider receives your phone number and message body to deliver the text.
• Basic technical information: sign-in session information stored by your browser so you can stay signed in and use the service.

How we use it

We use this information to sign you in, manage teams and rotas, show assignments and responses to the relevant team, and send texts only where a person has chosen to receive them. For subscriptions and free trials, Stripe collects and processes payment card details. Rota stores subscription status and billing period; we do not store full payment card details. We also use Cloudflare Turnstile to check signup requests. Our signup protection uses hashed phone numbers and IP addresses to limit code requests; these counters are removed after 30 days without activity.

Texts and your choice

SMS reminders are optional. A person can opt in or out in Rota settings. Reply STOP to stop Rota texts to that phone number across all Rota teams. To receive texts again, reply START and turn SMS back on in Rota settings. Standard message and data rates from your mobile provider may apply.

Service providers

We use Supabase to store Rota account and team records in the EU, Cloudflare to host the service, Twilio to send and receive SMS messages, and Stripe to process subscription payments. These providers process information for us to provide Rota. SMS providers necessarily receive the phone number and message details needed to route a text.

Cookies and optional measurement

We use cookie-free Cloudflare Web Analytics on public pages to measure visits and page performance. It does not run on private rota, invitation, or assignment response pages. Page URLs sent to Cloudflare exclude query strings and fragments.

We also count clicks on public navigation links and signup buttons using Cloudflare Analytics Engine. These counts contain only a fixed action name, page path and button location. They do not include form values, phone numbers, sign-in codes, team details, private links or visitor identifiers, and do not use cookies. Click records are retained for up to three months.

Rota uses browser storage needed for sign-in and basic service operation. If you accept optional marketing measurement, Meta records page views on the public home and team setup pages, a registration after a phone-verified team is created, and a trial start in the app after a live Stripe trial with a card is confirmed. Meta may receive standard browser and ad-click identifiers for attribution. We do not track rota activity or send names, phone numbers, team details, service details, assignments, responses, or faith-related information. You can allow, withdraw, or reset your choice below.

Who can see team information

People in a team can see the rota information needed to coordinate serving. Team leaders can manage team membership, create assignments, and see responses. Please contact your team leader if you have questions about how your team uses information.

How long we keep information

We keep information while it is needed to operate Rota, maintain team rota history, and meet security or legal needs. If you want access to, correction of, or deletion of your personal information, email us. We will review the request and explain any information we need to keep.

Your rights and contact

Depending on where you live, you may have rights to access, correct, delete, or object to the use of your personal information. To make a request or ask a question, contact Levites Tech Ltd at founder@levites.app.