Privacy Policy

1. The short, non-lawyer version

You give us your resume, website, or GitHub profile. We run it through an AI that says mean-but-useful things about it. We keep the minimum we need to run your account and make the product better. We don't sell your data. That's the whole deal — the rest of this page is just the legally required fine print.

2. What we collect

Account info: your email address and a hashed password. We never store your password in plain text, because that would be a much worse roast target than your resume.

Submitted content: whatever you give us to be roasted — an uploaded resume file, a website URL, or a GitHub username/profile.

Generated content: the roast we produce from that submission, plus any reactions, shares, or "feature on the Wall of Fame" choices you make about it.

Usage data: your weekly roast quota (limit, used, remaining, reset time), referral codes you've used or generated, and basic activity like login timestamps.

Technical data: session/auth tokens (cookies), IP address, and device/browser info, collected automatically for security and to keep you logged in.

3. How we use it

To generate your roast and show it back to you.

To run your account: email verification via one-time codes (OTP), password resets, and login sessions.

To enforce and track your weekly roast quota, and to grant temporary bonus quota when you refer a friend.

To display roasts you've explicitly chosen to make public — for example, on a shareable roast card or the Wall of Fame.

To keep the service secure, debug issues, and improve roast quality over time.

4. AI processing & other services we use

Generating a roast means sending your submitted content (resume text, website content, or GitHub profile data) to OpenAI for processing. That transfer is governed by OpenAI's own privacy and data-usage policies; we don't use your content to train our own models, and API-submitted content is not used by OpenAI to train theirs.

We use a transactional email provider (currently Resend) to send OTP codes and password-reset emails. That means your email address is shared with them for the sole purpose of delivering those emails.

We don't sell your data to advertisers, data brokers, or anyone else. If that ever changes, this policy — and the law, in most places — requires us to tell you first.

5. Public roasts & the Wall of Fame

Roasts are private by default — only you can see them. If you generate a shareable roast card or feature a roast on the Wall of Fame, that content (and only that content, not your account details) becomes publicly visible to anyone with the link or browsing the gallery.

You can un-feature or stop sharing a roast at any time from your dashboard. Removing it takes it down from the Wall of Fame going forward, though copies already shared or cached elsewhere (screenshots, saved links) are out of our hands — the internet has a long memory, much like a good roast.

6. How long we keep things

We keep your account and submitted content for as long as your account is active. If you delete your account, we delete your personal data and private roasts within a reasonable period, except where we're required to retain limited records for legal, security, or fraud-prevention purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you. You can handle most of this yourself from your account settings; for anything else, email us and we'll sort it out — no roast necessary.

8. Cookies & sessions

We use strictly necessary cookies/tokens to keep you logged in and to protect your account. We don't use third-party advertising or tracking cookies.

9. Children's privacy

Roast Anything isn't directed at children, and you must be at least 13 years old (or the minimum age required in your country) to use it. If we learn we've collected data from a child under that age, we'll delete it.

10. Changes to this policy

If we materially change how we handle your data, we'll update this page and, where required, notify you directly. Continuing to use Roast Anything after changes take effect means you accept the update.

11. Contact

Questions, requests, or complaints about your data? Reach us at hello@roastanything.com.