Last updated 1 September 2026
This Privacy Policy is issued by Sieyla Enterprises LLC, doing business as AutoRota, which operates the AutoRota application and is the sender of the text messages described below. Questions about this policy, or about messages received from AutoRota, may be sent to autorotaapp@gmail.com.
AutoRota is scheduling and safety software for aviation units. It is provided to an organization, and the people who use it are that organization’s personnel. This policy explains what AutoRota stores about them and what it does with it.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.
Mobile numbers are used only to contact you about your own work — principally overtime offers — and are passed only to the telecom provider that delivers the message or places the call. They are not rented or disclosed for any other purpose.
SMS and call alerts are opt-in. Having a mobile number on file is not consent. You consent separately inside the application, and you can withdraw that consent at any time in the application or by replying STOP to any message. Replying HELP returns contact information. Consent does not transfer if your number changes; it must be given again for the new number.
Message frequency varies and depends on operational activity. In a typical month a user receives fewer than ten messages. Message and data rates may apply depending on your mobile plan.
These are fallbacks. A notification is delivered to the application first. A text is sent only if you have not responded within a set period, and an automated phone call only if you still have not responded after that. If you respond at any point, the remaining steps do not happen.
Hazard reports carry no identifier of the person who filed them. There is no column in the database linking a report to a user, and no list of “your reports” exists. A report is retrievable only by a code shown once at submission and held by the reporter. Reports are released to the reviewing team in batches so that the timing of a submission does not identify its author. A reporter may optionally give their name if they want to be contacted.
Access is restricted by role and enforced in the database, not only in the interface. Personal contact details, calendar subscription tokens and signature images are readable only by the individual concerned. Administrators of the organization can see the roster and work records necessary to run it.
Data is held in a Postgres database operated by Supabase, and the application is served from Replit. Connections are encrypted in transit. Push notifications are delivered by Apple and Google; SMS is delivered by Twilio. These providers receive only what is needed to deliver the message.
Work and safety records are retained for as long as the organization requires them, which for safety records may be several years. Push subscriptions are removed automatically once a device stops accepting them. You may ask for your contact details to be corrected or removed at any time.
Questions about this policy: autorotaapp@gmail.com