Rose-Brook stores account and contact details, hotel or company details, competitor and audit inputs, benchmark results, support messages, and billing/subscription references from Stripe. Technical logs and Vercel analytics may be used to keep the service reliable and secure.

We use this data to provide the service, run benchmarks, manage accounts and subscriptions, send transactional emails, improve reliability and security, understand high-level marketing page usage, and respond to support or privacy requests.

For UK GDPR purposes, the usual bases are contract for providing paid or requested services, legitimate interests for security and service improvement, consent where a non-essential preference or communication requires it, and legal obligation where records must be kept.

Payments are handled by Stripe. Rose-Brook stores Stripe customer, subscription and billing-status references, but card details are handled by Stripe rather than stored in the app.

The service uses Supabase for authentication and application data, Vercel for hosting and analytics, Stripe for billing, Resend for transactional email, and OpenAI or other configured AI model providers when benchmark prompts are sent for analysis. Rose-Brook may also store first-party public page-visit telemetry in Supabase for service insight.

Workspace, benchmark and billing-status records are kept while needed to operate the service, preserve audit history, meet legal obligations and handle support. Submit a support request and select Privacy / data request for access, correction or deletion requests.

You can ask for access, correction, deletion, restriction, objection or portability where those rights apply. You can also complain to the UK Information Commissioner's Office if you are unhappy with how a request is handled.