Privacy Policy

Who is responsible

Roast & Fix is operated by Mujafet Osmani, based in North Macedonia, who is the controller of the personal data described here. For privacy questions, access or deletion requests, contact synegraco@gmail.com.

What you submit

The current beta analyzes pasted copy only. To get an audit, please paste your landing page copy into the form. When requesting a rewrite, you can also provide a target audience, genuine product advantages and the desired visitor action. Please do not submit confidential information or personal data you do not have permission to use.

Automatic website reading is disabled: entering a website address does not result in the website being fetched or analyzed. The service reads only the copy you paste.

1. Application storage

The application does not write submitted copy, optional context, scores or generated rewrites to its database. Results live only in your current browser tab and disappear when you refresh or close it. The application does not intentionally write submitted copy into its own logs. There are no accounts.

2. Pseudonymous rate-limit records

To prevent abuse, the application stores a pseudonymous identifier created by hashing your IP address, together with a quota name, a time window and a request count. The raw IP address is not stored in that table. Hashing reduces identifiability but is not guaranteed anonymisation, so these records are treated as personal data.

Expired records become eligible for deletion after two hours and are removed in small batches as later requests arrive. This is an event-driven cleanup, not a fixed deletion deadline.

3. External AI processing

Each roast or rewrite request sends the submitted copy, any optional rewrite context and the diagnostic text needed for a rewrite to the configured model — OpenAI (openai/gpt-6-astra) via the Lovable AI Gateway — to produce your result. Every request is sent with store: false, which asks the provider not to keep the conversation or output in dashboards or session storage. Requests do not include your raw IP address, cookies or an account identifier.

store: false is a per-request setting: it asks OpenAI not to retain response objects in the organization dashboard or for session retrieval, but it does not by itself establish enterprise Zero Data Retention. Under OpenAI's standard API terms, inputs and outputs are not used to train models; OpenAI may still retain abuse-monitoring logs for up to 30 days unless an enterprise Zero Data Retention agreement is formally approved. Because Roast & Fix routes requests through the Lovable AI Gateway and holds no independent enterprise agreement with OpenAI, zero data retention cannot be independently guaranteed.

The gateway and hosting infrastructure may also process and temporarily log standard operational metadata — such as timestamps, request status, token counts and error diagnostics — to route requests, apply limits and secure the service.

Legal bases

Processing is based on performing the service you request (analysing and rewriting the copy you submit) and on the operator's legitimate interests in securing the service, preventing abuse and diagnosing failures. This applies under North Macedonia's Law on Personal Data Protection and, where relevant, the EU General Data Protection Regulation.

Recipients and international transfers

Data is processed by the hosting and database infrastructure that runs Roast & Fix, and submitted content is processed by the Lovable AI Gateway and OpenAI. Data sent for AI processing is transferred to OpenAI infrastructure in the United States and other locations where OpenAI and its hosting providers operate, subject to their respective commercial data processing terms and standard contractual clauses where applicable. X and LinkedIn receive data only if you use their sharing buttons. No data is sold.

Scorecards and social sharing

Pasted copy is not placed on a scorecard or in a share link. Roast lines are excluded from pasted-copy scorecards by default because they may echo submitted material. Download and sharing controls stay locked until you confirm you reviewed the preview. Nothing is posted automatically.

Your rights

You have the right to request access to, correction, deletion or restriction of your personal data, to object to processing based on legitimate interests, and to data portability. Send requests to synegraco@gmail.com; we aim to respond within one month. Because there are no accounts and submissions are not stored, there may be little or nothing to retrieve — to locate rate-limit records we may need the IP address you used and the approximate time.

You may also complain to the Personal Data Protection Agency of North Macedonia (Агенција за заштита на личните податоци, azlp.mk) or to the data-protection authority where you live.

Cookies, age and changes

Roast & Fix does not use advertising or tracking cookies. The service is not directed at children under 16. This policy will be updated whenever data handling, AI providers, website reading, accounts, payments or storage change, and the date above will change with it.