← Back to home

Privacy Policy

Last updated: April 13, 2026

ProfileRoast ("we", "us", or "our") operates the profileroast.io website. This policy explains what data we collect, why, and how we protect it.

1. Information We Collect

Account Data

When you sign up we collect your email address and authentication credentials via Supabase Auth. If you sign in with a social provider, we receive the profile information you authorize (name, email, avatar).

Social Media Profile Data

When you run an audit, we scrape publicly available data from the social media handle you provide (bio, follower counts, recent posts, engagement metrics). We store this data to generate your audit and cache results.

Payment Data

Payments are processed by Stripe. We never see or store your full card number. Stripe provides us with a customer ID, subscription status, and transaction metadata.

Usage Data

We collect standard analytics data (pages visited, device type, browser) to improve the product.

2. How We Use Your Data

We do not sell your personal data. We do not use your data for advertising.

3. AI Processing

Audit data is sent to third-party AI providers (Groq, OpenAI) to generate roasts and recommendations. These providers process data per their own privacy policies and do not use your data to train models.

4. Data Sharing

We share data only with:

We may also disclose data if required by law or to protect our rights.

5. Data Retention

Audit results are stored indefinitely so you can revisit them. You can request deletion of your account and all associated data by emailing us.

6. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand usage patterns. No third-party advertising cookies are used.

7. Your Rights

You can request access to, correction of, or deletion of your personal data at any time. If you are in the EU/EEA, you have rights under GDPR including data portability and the right to object to processing. Contact us to exercise these rights.

8. Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication via Supabase, and role-based access controls. No system is 100% secure, but we take reasonable steps to protect your data.

9. Children

ProfileRoast is not intended for users under 13. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website.

11. Contact

Questions about this policy? Email us at hello@profileroast.io.