Privacy Policy

1. Who is responsible

Blindspot Studio LLC, a Wyoming limited liability company (“we”, “us”), operates roastmy.chat (the “Service”) and is the controller of your personal data. Contact: hello@roastmy.chat.

2. What data we collect

2.1 Data you give us

• Your answers to the guided questions — role, seniority, location, salary figures, goals.
• Your email address, when you provide it.
• Your public LinkedIn profile, when you give us its URL or ask us to find it by name. We keep a snapshot of the publicly visible profile.
• Messages you send us, attachments included.

2.2 Data we collect automatically

• How you found us — the referring page and any campaign parameters in the link you clicked.
• Browser and device data — browser, operating system, device type, approximate country, and the IP address of sign-in sessions.
• Usage data — which screens you saw and which options you chose.
• Transaction data — amount, date, plan, refunds, and a payment reference. Card details go directly to our payment processor; we never receive the full card number.
• Cookies and similar technologies, as described in our Cookie Policy.

3. Why we process it

• To provide the Service — build your plan from your answers, deliver it, let you sign back in, and fix errors. As a result, you get the plan you asked for.
• To process payments, through a third-party payment processor.
• To analyse and improve the Service — understand which screens work and which lose people. As a result, we change the product based on what we learn.
• To send reminders. If you leave your email address and do not buy a plan, we may send you at most two emails: one shortly after, and one later with a reduced price. Nothing else — no newsletter, no sequence. Every such email has an unsubscribe link and the one-click unsubscribe header your mail app understands. Unsubscribing stops these reminders only; sign-in links and replies to your own messages still work.
• To communicate with you about your plan, your payment, or a message you sent us.
• To enforce our Terms, prevent fraud, and comply with the law, including responding to lawful requests from authorities.

We do not sell your personal data, we do not use it for advertising, and we make no automated decision about you with legal or similarly significant effects.

4. Legal basis (EEA and UK)

• Performance of a contract — providing the Service, processing payments, communicating with you about them.
• Consent — reading the LinkedIn profile you point us at. You withdraw it by asking us to delete the snapshot.
• Legitimate interests — analysing and improving the Service, keeping it secure, and sending the reminders described above, in a measured way and with an easy way out. Where your jurisdiction requires it, we rely on consent instead.
• Legal obligation — keeping transaction records, answering lawful requests.

5. Who we share it with

We share personal data with providers that operate parts of the Service on our instructions, and only for the purposes above:

• hosting and database providers;
• our payment processor (Stripe);
• our email delivery provider, for the emails we send and receive;
• our product analytics provider (Mixpanel), which receives the screens you saw, the options you chose, your payment amounts and, once you have given it, your email address;
• an AI model provider (OpenAI), which receives your answers to generate the plan. Data sent through their API is not used to train their models;
• profile lookup and web search providers, for the LinkedIn profile you point us at.
• when advertising measurement is enabled, LinkedIn receives confirmation that you selected a profile, submitted an email or completed a purchase, plus the purchase amount and currency. Server-side matching uses a SHA-256 hash of your email and/or the LinkedIn ad click identifier when available. Hashing does not make this data anonymous. We do not send LinkedIn your salary, questionnaire answers or profile content for advertising measurement.

We may also disclose data to public authorities when the law requires it, and to a successor in the event of a merger, acquisition, or sale of assets.

6. International transfers

We and our providers are located in the United States. If you are in the EEA, the UK, or another country that restricts transfers, your data is transferred there under the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

7. How long we keep it

We keep personal data for as long as needed for the purposes above, unless the law requires or permits longer. Transaction records are kept for as long as tax and accounting rules require, even after everything else is deleted. When you ask us to delete your data, we do so within thirty days, subject to that exception.

8. Your rights

You can ask us to access, correct, delete, or export your personal data, to restrict or object to a particular use, and to withdraw consent where consent is the basis. Write to hello@roastmy.chat; we answer within thirty days. If you are in the EEA or the UK, you may also complain to your local data protection authority. You may act through an authorised agent, in which case we will verify their authority before responding.

California residents have the right to know what personal information we collect and how we use it, to request its deletion, to opt out of its sale — we do not sell it — and not to be discriminated against for exercising these rights.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, passwordless sign-in, and access limited to those who need it. No method of transmission or storage is completely secure.

10. Age limitation

The Service is not directed at anyone under 18. We do not knowingly collect data from minors; if you believe we have, contact us and we will delete it.

11. Do Not Track

We do not respond to browser “Do Not Track” signals. Our own measurement is first-party and is described in the Cookie Policy.

12. Changes

We may update this policy. The date at the top changes when we do, and material changes are announced on the Service or by email. Continued use after the effective date means you accept the revised policy.

13. Contact

Blindspot Studio LLC — hello@roastmy.chat.