Privacy Policy
Last updated: 14 September 2026
This page explains what data RotaWide (rotawide.com) processes, why we use it, and how we protect it. It will be updated as additional legal documents are published.
Controller
RotaWide is a travel discovery, route planning and company (studio) portal. Use the contact form for privacy requests.
Data we collect
Account email and name; authentication cookies for sessions; routes, travel plans and favorites you create; studio profile and services in the company portal; support messages. Location is processed only when you share it. We do not invent missing data.
Instagram connection
When a studio connects Instagram we use the official Instagram Graph API (OAuth). We may receive the Instagram account id, username and public media references (permalink, media type, caption). Access credentials are stored encrypted on the server only and are never returned to the browser, mobile app or API JSON. We do not scrape Instagram. You can disconnect from the company portal.
Cookies and sessions
We use HttpOnly authentication cookies to keep you signed in. Functional cookies such as language preference may also be used. This policy does not assume advertising-network cookies.
Sharing
Data may be shared with hosting, email and storage providers solely to run the service. Instagram OAuth goes only through Meta’s official API. We do not sell your data or share it as a marketing list except where the law requires.
Retention
Account and studio data are kept while the account or company remains. Instagram credentials are removed when you disconnect. Backups and legal retention periods may apply.
Your rights
You may request access, correction, deletion or objection through our contact channels, including KVKK rights where they apply. You can also manage Instagram permissions in your Instagram account settings.
Contact
For privacy requests use the in-site contact form or email support@rotawide.com.