← Back to Home

Privacy Policy

Last updated: July 23, 2026

HeyRoasty ("we," "us," "our") respects your privacy. This policy explains what data we collect, why, and how it's handled.

1. What We Collect

  • Account data: email address, and if you sign up via Google/GitHub, basic profile info (name, email) provided by that provider.
  • Usage data: URLs you submit for roasting, roast/comparison history tied to your account (if logged in), IP address (used for rate limiting and abuse prevention).
  • Payment data: if you subscribe to a paid plan, payment processing is handled by our payment provider — we do not store your full card details ourselves.

2. How We Use Your Data

  • To provide and improve the Service (running roasts, displaying your history, enforcing fair usage limits)
  • To send transactional emails (welcome emails, magic links, password resets, receipts)
  • To detect and prevent abuse (e.g. rate-limit circumvention)
  • We do not sell your personal data to third parties.

3. Third-Party Services

We use the following third parties to operate HeyRoasty, each with their own privacy practices:

  • Supabase — authentication and database hosting
  • Resend — transactional email delivery
  • Vercel — application hosting
  • OpenAI — AI analysis of submitted website content
  • Google (PageSpeed Insights, Safe Browsing, Cloud Vision) — technical audits and safety checks on submitted URLs
  • [Dodo Payments] — payment processing, once billing is live

4. Data Retention

We retain your account data and roast history as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

5. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. Contact us at hello@heyroasty.com to exercise these rights.

6. Cookies

We use essential cookies/local session tokens to keep you logged in. We do not currently use third-party advertising or tracking cookies.

7. Security

We take reasonable technical measures (encrypted connections, access controls, database row-level security) to protect your data, but no system is 100% secure.

8. Children's Privacy

HeyRoasty is not intended for use by anyone under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy periodically. Material changes will be reflected with an updated "Last updated" date.

10. Contact

Questions about this policy? Email hello@heyroasty.com.