Privacy Policy

Last updated: December 16, 2024

Introduction

RoastWeb ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using RoastWeb, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Information You Provide

  • URLs submitted for auditing: Website addresses you enter for analysis
  • Account information: Email address, name, and password (if you create an account)
  • Payment information: Processed securely through Stripe (we never see your full credit card details)
  • Contact information: When you contact us via email or contact form

2. Automatically Collected Information

  • IP Address: Stored as SHA-256 hash for rate limiting (not reversible to original IP)
  • Usage data: Pages viewed, features used, audit results
  • Analytics data: Via Google Analytics (page views, referrer, browser info)
  • Cookies: Essential cookies for authentication and preferences

How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain our Service
  • Process website audits and generate reports
  • Manage your account and subscription
  • Send you important updates and security alerts
  • Respond to your comments and questions
  • Analyze usage patterns to improve the Service
  • Prevent fraud and enforce rate limits
  • Comply with legal obligations

Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

  • Service Providers: Third-party companies like Stripe (payments), Firebase (database), Google Analytics (analytics)
  • Public Reports: When you publish a roast, it becomes publicly accessible via a shareable link
  • Legal Requirements: If required by law or in response to valid legal requests
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us. Some information may be retained for legal compliance purposes.

Security

We implement industry-standard security measures to protect your data:

  • IP addresses are hashed with SHA-256 (irreversible)
  • Passwords are hashed with bcrypt
  • HTTPS encryption for all data in transit
  • Regular security audits and updates
  • Access controls and authentication

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Cookies and Tracking

We use cookies and similar tracking technologies:

  • Essential Cookies: Required for authentication and core functionality
  • Analytics Cookies: Google Analytics to understand how you use the Service
  • Preference Cookies: Remember your settings and choices

You can control cookies through your browser settings. Disabling essential cookies may limit functionality.

Your Rights (GDPR & CCPA)

If you are a resident of the EU or California, you have certain rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing of your data
  • Right to Opt-Out: Opt out of marketing communications

To exercise these rights, contact us at privacy@roastweb.com

Do Not Track

We respect Do Not Track (DNT) browser signals. When DNT is enabled, we do not track your activity for analytics purposes.

Third-Party Services

Our Service integrates with:

Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on our Service. Your continued use after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: