Privacy Policy

Last updated: May 5, 2026

This Privacy Policy explains what information Roocast collects, how we use it, and the choices you have. We collect only what we need to operate the Service and never sell personal data.

What we collect

Account information: your email, name, and handle.
Offers and applications: the offers you create and the structured intake responses your applicants submit.
Payment metadata: payment-provider transaction references and status. We do not store card numbers.
Operational logs: request and error logs sufficient to run the Service securely.

How we use it

To provide the Service, including sending transactional email;
To process subscription and applicant payments via our payment provider;
To improve reliability, security, and performance;
To comply with legal obligations.

Sub-processors

We share data with these processors strictly to operate the Service:

Payment provider — applicant and subscription payment processing (current provider disclosed in our data processing addendum on request)
Brevo — transactional email delivery
Vercel — application hosting
PostgreSQL provider — encrypted database hosting (provider documented in our data processing addendum on request)

Your rights

You can update or delete your account at any time from Settings. EEA, UK, and California residents have additional rights under GDPR/CCPA, including the right to access, correct, or erase personal data. Email privacy@roocast.com.

Data retention

We retain account data while your account is active. After deletion, data is purged within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

Security

Data is encrypted in transit and at rest. Sessions are secured via HttpOnly cookies. Magic-link tokens are hashed before storage and expire within 20 minutes.

Contact

Email privacy@roocast.com.