Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Account data: Email address and display name when you register
• URLs submitted: Website addresses you submit for analysis
• Payment data: Processed securely by Stripe — we never store card details
• Usage data: Reports generated, scores, and analysis results

2. How We Use Your Data

We use your information to:

• Provide and improve the analysis service
• Process payments and manage your subscription
• Send password reset emails when requested
• Store your report history for your account

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate:

• Firebase (Google): Authentication and database storage
• Stripe: Payment processing
• Google PageSpeed Insights: Website performance analysis
• OpenAI: AI-generated analysis and roast content

Each service is governed by its own privacy policy. URLs you submit may be sent to these services for analysis.

4. Data Storage and Security

Your data is stored in Firebase Firestore (Google Cloud). We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication, and environment-isolated API keys. However, no system is 100% secure.

5. Cookies

We use minimal cookies and local storage for:

• Authentication session management
• Theme preference (light/dark mode)

We do not use tracking cookies or third-party advertising cookies.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, contact us at support@roastflowai.com.

7. Data Retention

We retain your account data and reports as long as your account is active. You can delete your account and associated data at any time by contacting support. Anonymous analysis logs may be retained for up to 12 months for service improvement.

8. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email or a notice on the Service.

10. Contact

For privacy-related questions, contact us at support@roastflowai.com.