roast.ag Privacy Policy

Effective date: October 3, 2026

roast.ag (“we,” “us,” or “our”) operates the job-matching service at https://roast.ag. This Privacy Policy explains what information we collect when you use the Service, how we use it, and the choices you have.

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

Information we collect

Account and profile. Email address, password (if you sign up with email), display name, and identity basics from Google sign-in when you choose that option. roast.ag shares authentication with Product Agent — the same account can access both products.

Job catalog data. Public Ashby job-board payloads we fetch (titles, locations, descriptions, compensation when the board publishes it, apply URLs, and the raw JSON). This is public employer data, not your personal data.

Future resume matching. When resume upload ships, we will store the resume text you submit, derived embeddings, and match results, scoped to your account/workspace. That feature is not in this slice.

Billing. If paid plans return, payment records are processed by Stripe. We do not store full card numbers on our servers.

Technical and security. Session cookies needed to keep you signed in, an active-workspace cookie, and server logs that may include IP address and user agent for abuse prevention and reliability.

AI processing. If embeddings are enabled, title and description text are sent to model providers through Vercel AI Gateway. We do not send fake vectors and we do not embed when no gateway credential is configured.

How we use information

• Provide, operate, and secure roast.ag (accounts, workspaces, and the job catalog)
• Authenticate users and enforce workspace access controls
• Keep job postings fresh from public Ashby boards
• Optionally generate embeddings for future resume matching
• Send transactional messages such as authentication emails
• Improve reliability, prevent abuse, and comply with law

How we share information

We share information with service providers that help us operate roast.ag, including Supabase (authentication and database), Stripe (payments, if used), Vercel (hosting and AI gateway), and underlying model providers used for embeddings. We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer.

We do not sell your personal information.

Retention and security

Account and workspace data are retained while your account or workspace is active. Closed job postings are kept (not deleted) so history remains queryable. We use industry-standard safeguards including encrypted transport and access controls; no method of transmission or storage is completely secure.

Your choices

• Update profile settings in the app after signing in
• Request account or data deletion by emailing support@roast.ag
• Clear browser cookies, which may sign you out of roast.ag

Children

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

Contact

Privacy questions: hello@roast.ag or support@roast.ag. More ways to reach us: https://roast.ag/contact.