Roastgaard
Get started for free

Draft: fields marked “TO FILL” are still being completed.

Privacy policy

1. Controller

[TO FILL: name or company name], [TO FILL: street], [TO FILL: postcode] [TO FILL: city], Austria. Email: hello@roastgaard.com.

2. What we process and why

Free demo (no account)

The text you paste into the demo is sent to our AI system for review, and the result is stored so you can share it. To prevent abuse we store a hash of your IP address, never the address itself. Legal basis: Art. 6(1)(b) GDPR (providing the service you asked for) and (f) (abuse prevention).

Account

Email address, password (hashed only), profile details such as university and programme, the theses you upload, guideline documents, reviews, questions to Freya, snack balance and purchases. Legal basis: Art. 6(1)(b) GDPR (contract).

Payments

For a purchase we store the pack, amount, time and payment status. You enter your payment details (card, account) directly with our payment provider; we never see them. Legal basis: Art. 6(1)(b) and (c) GDPR (contract, tax record-keeping).

Feedback and support

Messages you send through the feedback bubble or "Contact support", with the email address you give. Legal basis: Art. 6(1)(b) and (f) GDPR.

Usage statistics

We count page views and clicks with a random ID stored in your browser; no IP address and no third-party tracking. Legal basis: [TO CHECK: consent under TKG 165(3) needed, or legitimate interest enough?].

3. Recipients and processors

  • Hetzner Online GmbH (Germany): hosting of the website and our AI server.
  • Supabase Inc., Frankfurt data centre (EU): database, login, file storage.
  • Anthropic PBC (USA): the AI model that reviews your text. Transfer to a third country based on [TO CHECK: data processing agreement + standard contractual clauses / EU-US Data Privacy Framework].
  • Resend (Ireland data centre, EU): sending confirmation and login emails.
  • Mollie B.V. (Netherlands): payment processing, as an independent controller.
  • Heinlein Support GmbH (mailbox.org) (Germany): our email inbox.
  • Crossref: we look up the references in your thesis there (title, DOI), never details about you.

Your thesis is never passed to your university or any other third party and is not used to train AI models [TO CHECK: confirm training exclusion in the Anthropic contract].

4. Cookies and browser storage

We only set what the service needs: a login cookie while you are signed in, a cookie with your language choice, and in your browser's local storage your settings and the ID for usage statistics. No third-party advertising or tracking cookies.

5. How long we keep data

Account data and theses until you have the account deleted. Demo results: [TO FILL: period]. Statistics: [TO FILL: period]. Purchase records: 7 years (Austrian Federal Fiscal Code).

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw consent at any time. Write to hello@roastgaard.com; to delete your account, an email from the account's address is enough. You can also complain to the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

7. Automated assessment

The score is an assessment of your text, not a decision about you, and has no legal effect. Your grade is given by your university alone.

Last updated: 2026-10-30

This English text is a translation; where it differs, the German version prevails.