Your Privacy
Matters

1. Introduction

Roastr Inc. ("we," "us," or "our") operates the Roastr coffee platform (the "Service"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the choices and rights you have regarding your data.

2. Information We Collect

2.1 Account & Profile Data

When you create an account, we collect your name and email address through our authentication provider, along with any additional profile details you choose to add.

2.2 Coffee Data

We store the coffee, roast, recipe, and brew data you enter into the Service. This content belongs to you and is kept so you can use and revisit it.

2.3 Billing Data

Payments are handled by Stripe. Roastr stores invoices and payment-method metadata (such as card brand and last four digits) so we can manage your subscription. We never store or have access to raw card numbers.

2.4 Technical & Analytics Data

We collect a limited amount of technical and analytics data to keep the Service running and to understand how it is used. Our analytics are privacy-preserving and cookieless — we do not use cross-site tracking cookies or advertising identifiers.

3. How We Use Your Information

We use the information we collect to:

• Operate and maintain the Service;
• Process billing and manage your subscription;
• Provide customer support and respond to your inquiries;
• Improve the product and develop new features.

4. Cookies & Tracking

Roastr is cookieless for analytics. We set only strictly-necessary session cookies that are required to keep you signed in and to maintain account security. Because we do not set any cookies that require consent, the Service does not display a cookie consent banner.

For more detail, see our Cookies page.

5. Sub-processors

We use a small number of trusted third-party service providers ("sub-processors") to operate the Service. Each processes data only as needed to provide its service to us.

For the current list, see our Sub-processors page.

6. Your Rights

You have the right to access, port, erase, and rectify your personal data. Here is how to exercise each:

• Access & portability: You can export your data at any time. Data export is self-service under Account Settings → Privacy & Data.
• Erasure: You can request account deletion, also self-service under Account Settings → Privacy & Data. A 30-day grace period applies before your data is permanently erased, during which you can cancel the request.
• Rectification: You can correct most of your data by editing it directly in the Service. For anything you cannot change yourself, contact support.

7. Data Retention

We retain your active data for as long as your account remains open so you can continue to use the Service. When you submit a deletion request, your data is permanently erased after the approximately 30-day grace period described above.

8. International Data Transfers

Roastr and most of our sub-processors are based in the United States. As a result, your data may be transferred to and processed in the United States.

9. Children's Privacy

Roastr is not directed at children under 13 (or the minimum age required in the user's jurisdiction), and we do not knowingly collect personal information from children under that age. If we learn that we have collected personal data from a child under that age, we will delete that information. A parent or guardian who believes their child has provided us with personal data can contact us at privacy@roastr.tech.

10. Contact

If you have questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@roastr.tech.

Last updated: May 21, 2026