Single Source of Truth

Privacy Policy &
AI Commitment

How Roast Ring safeguards user data, processes AI comedy prompts, maintains ephemeral room lifecycles, and enforces enterprise-grade security.

“We build AI experiences that are entertaining, respectful, and strictly designed for corporate & professional compliance.”

Zero public model training • Ephemeral event storage • SSL/TLS encrypted WebSockets

1. Privacy First Architecture

MINIMAL DATA COLLECTION

Protecting user privacy is Roast Ring's highest engineering priority. We design all system components to minimize data retention and safeguard confidentiality across both individual roasts and live corporate team events.

2. Resume Roast Data Policy

NO PERMANENT STORAGE
  • Resumes are processed strictly on demand to generate requested feedback reports.
  • Uploaded PDF/DOCX files are deleted from runtime memory immediately after analysis.
  • We never use customer resume content to train public or proprietary AI models.

3. Team Events Ephemeral Data

EPHEMERAL ROOM LIFECYCLE
  • Participant responses, votes, and roasts exist only during active live sessions.
  • WebSocket memory state automatically purges as soon as the Host ends the event.
  • Organizer account details are retained only for authentication and credit billing.

4. Trusted AI Providers

STRICT ON-DEMAND EXECUTION

Roast Ring utilizes tier-1 enterprise AI model providers (including Google Gemini API) for generating dynamic comedy responses. AI prompts are evaluated statelessly on demand. Enterprise API agreements ensure customer data is never retained for training.

5. Security Infrastructure & Encryption

ENTERPRISE PROTECTIONS
SSL/TLS Web Traffic

100% encrypted HTTPS web communication across all routes.

Encrypted WebSockets

PartyKit real-time room communication is encrypted in transit.

Secure Payment Gateways

PCI-DSS certified gateway transactions; zero card data stored on our servers.

Organizer Auth Protection

Supabase SSR authentication with secure magic links and OTP.