Privacy

Plain-language summary of what this MVP actually does. No lawyer wrote this, and it makes no claims the code doesn't back up.

What we collect

  • The text you submit to be roasted (pasted profiles/bios and anything you type about yourself).
  • Any screenshots you upload.
  • The generated roast.
  • An anonymous session identifier stored in a cookie, plus a one-way hash of your IP address used only for rate limiting.
  • Anonymous funnel events (for example “paywall viewed”). These contain no free-text you wrote.
  • An email address only if you explicitly type one into the optional save form.

Why we collect it

Your input is sent to OpenAI to generate the roast. Everything is stored so your roast still works when you refresh or come back later, and so a paid roast stays unlocked. Funnel events tell us whether the product works at all.

Who we send it to

  • OpenAI — receives your submitted text and any screenshots in order to generate the roast.
  • Lemon Squeezy — handles payment if you buy the full roast. They collect your payment details directly. We never see or store card data.
  • An analytics provider, if the operator configured one. By default, events are stored only in this app's own database.

How long we keep it

Uploaded screenshots are deleted automatically after the retention window configured by the operator (24 hours by default) using the cleanup endpoint shipped with this app. Roast text and results are kept until you ask for deletion.

Deleting your data

Email the operator of this deployment with your roast URL and ask for deletion. Deleting a roast session removes its result, payment records and share links. If you paid, the payment record itself may be retained by Lemon Squeezy for their own accounting obligations.

Cookies

One cookie: an anonymous session token so your roasts are associated with your browser. No advertising cookies and no cross-site tracking.

Children

This is not intended for anyone under 13.

Contact

This deployment is served from https://www.airoastus.fun. Its operator is responsible for responding to data requests.