1. WHO WE ARE
Roast Rocket is operated by Sync Motion GmbH, Niedergams 39, 8524 Deutschlandsberg, Austria.
For privacy-related inquiries contact us at office@sync-motion.com.
2. WHAT DATA WE COLLECT
When you use Roast Rocket we collect and process the following data:
- Startup idea & answers: The idea you submit and the answers you provide during the 15-question evaluation.
- Session data: A unique session ID, game progress, timestamps, and AI-generated questions and feedback.
- IP address: Used solely for rate limiting. Stored temporarily in memory and not persisted to any database.
- Bot verification: Cloudflare Turnstile collects a verification token to prevent abuse. This token is ephemeral and not stored by us.
3. WHAT WE DO NOT COLLECT
- We do not require an account, email address, or password.
- We do not use analytics, tracking pixels, or advertising cookies.
- We do not store cookies on your device.
4. HOW WE USE YOUR DATA
- AI evaluation: Your idea and answers are sent to an external large language model (LLM) provider to generate follow-up questions, scores, and feedback.
- PDF report: If you complete all 5 planets, a PDF report is generated from your session data and provided for download.
- Rate limiting: Your IP address is used to prevent abuse of the service.
5. THIRD-PARTY SERVICES
We share data with the following third parties, strictly for the purposes described:
- X.AI (Grok LLM): Your startup idea and answers are sent to X.AI's API for AI-powered evaluation. Data processing is subject to X.AI's privacy policy.
- Cloudflare (Turnstile): Your IP address and verification signal are processed by Cloudflare for bot detection. See Cloudflare's privacy policy.
- Google Fonts: Fonts are loaded from Google's servers. See Google's privacy policy.
6. DATA STORAGE & RETENTION
Session data (your idea, answers, scores, and AI feedback) is stored in a server-side database for as long as needed to provide the service. IP addresses are held temporarily in memory for rate limiting and are not written to persistent storage.
7. YOUR RIGHTS (GDPR)
Under the General Data Protection Regulation (GDPR) you have the right to:
- Request access to the personal data we hold about you.
- Request correction or deletion of your data.
- Object to or restrict the processing of your data.
- Lodge a complaint with a supervisory authority (in Austria: Datenschutzbehörde).
To exercise any of these rights, contact us at office@sync-motion.com with your session ID so we can locate your data.
8. LEGAL BASIS
We process your data based on legitimate interest (Art. 6(1)(f) GDPR) to provide the Roast Rocket service. For data sent to third-party AI providers, processing is necessary to perform the service you requested (Art. 6(1)(b) GDPR).
9. CHANGES TO THIS POLICY
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.