RootWise

Privacy Policy

Effective date: June 2026

1. Who we are

RootWise (“RootWise”, “we”, “us”) provides a guided root-cause-analysis coaching platform for manufacturing teams. This policy explains what data we handle and how we protect it. The legal entity responsible for your data isRootWise, United Kingdom — set NEXT_PUBLIC_LEGAL_ADDRESS for production.

2. Information we collect

  • Account information — your name and email address (or the details returned by your Microsoft sign-in).
  • Organization data — your company, sites, departments, team members, and their roles.
  • Investigation content — the problems, causes, actions, handoffs, and conversation you enter into the coach.
  • Evidence — photos and files you choose to upload to an investigation.
  • Technical data — log and usage data needed to operate, secure, and troubleshoot the service.

3. How we use your data

We use your data to provide and operate the service, power the AI coach, keep your account secure, provide support, and improve RootWise. We do not sell your personal data, and we do not use your content for advertising.

4. AI processing

The coach is powered by Anthropic's Claude API. The content of your investigations is sent to Anthropic to generate responses. Under Anthropic's commercial terms, your content is not used to train their AI models.

5. Sharing & subprocessors

We share data only with the infrastructure providers needed to run RootWise — currently Supabase (database, authentication, storage), Vercel (hosting), Microsoft (optional single sign-on), and Anthropic (AI coaching). Each processes data on our behalf under their own security and privacy commitments. See our Security & Trust page for details. We may also disclose data if required by law.

6. Data retention

We retain your data for as long as your account is active. When you ask us to delete your organization, or close your account, we delete your data within a reasonable period after your request, except where we must retain it to meet a legal obligation.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at hello@rootwise.opexelevate.co.uk and we will respond within the time required by applicable law.

8. Security

We protect your data with database-level tenant isolation, encryption in transit and at rest, role-based access control, and an immutable audit trail. Full details are on our Security & Trust page.

9. International transfers

Your data is hosted in EU (Supabase) / US (Vercel). Where data is transferred across borders, we rely on appropriate safeguards as required by applicable data-protection law.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the effective date above.

11. Contact

Questions about your privacy? Contact us at hello@rootwise.opexelevate.co.uk or through our contact page.