Privacy Policy

RoastMyLanding is operated by DevsCult Technologies Pvt Ltd (“DevCults”, “we”, “us”), based in Pune, Maharashtra, India. This policy explains what we collect when you use RoastMyLanding at roastmylanding.lol, why we collect it, and what you can ask us to do with it.

Questions or requests: connect@thedevscult.com.

It covers the public site, sign-in, roast submissions, reports, sharing, checkout, and the Human Judge / Fix It For Me enquiry form. It does not cover third-party sites we capture at your request, or processors’ own policies.

Account. If you sign in with Google, GitHub or a magic-link email, we store your email, name (if the provider sends one), provider account ids, and a session. We use verified email only.

Roast jobs. The URL you submit, the canonical URL and domain we derive from it, your chosen goal and roast mode, report type (free, Ultimate, or Re-Roast), status, score, verdict, and timestamps.

Page capture. For a public URL you submit, we take screenshots and extract visible evidence a visitor would see: title, on-page text, headings, link labels and hrefs, button labels, and selected meta tags. We do not store the page’s raw HTML, scripts, or hidden nodes.

Leads. If you ask for a Human Judge or Fix It For Me, we keep the work email, page URL, note, and the kind of help you selected.

Operations. We log enough to run the product: job metadata in MongoDB, short-lived rate-limit counters (including IP) in Redis, and capture-job messages on a queue. We do not run a product analytics SDK on the site today.

• Run the roast: fetch the public page, score it, and show you the report.
• Tie reports to your account so you can reopen them and see Re-Roast eligibility.
• Send magic-link and transactional email (report access, sign-in).
• Take payment and unlock Ultimate Roast or Re-Roast when you buy.
• Respond to Human Judge / Fix It For Me enquiries.
• Stop abuse (rate limits, blocked private-network URLs, failed captures).
• Improve the product using aggregated or de-identified patterns, not your private findings as marketing copy.

Screenshots are stored in a private object store under a per-job key. Extracted evidence lives with the roast job. Treat anything on the submitted page as potentially copied into the report. Do not submit a URL you are not allowed to have analysed, and do not submit pages that expose secrets, private dashboards, or personal data of people who did not ask for a roast.

We capture public pages only. Login walls, internal tools, and non-public hosts are outside the service and may be rejected.

Reports default to you. If you turn public sharing on, the share card shows domain, score, verdict, and worst offence. Full findings, rewrites, and extracted contact data stay private. You can turn sharing off. Do not share a card if the domain itself is sensitive.

We use other companies to run RoastMyLanding:

• Google and GitHub — optional sign-in.
• Resend — magic-link and transactional email.
• MongoDB — accounts and roast records.
• Upstash (Redis and QStash) — sessions, rate limits, capture-job queue.
• Amazon Web Services (S3) — private screenshots.
• An Indian payment processor — UPI, card, or netbanking when you pay. Card numbers are handled by the processor, not stored by us.

We do not sell your personal data.

We use an essential session cookie so you stay signed in. That is required to provide the account. We do not set advertising cookies, and we do not currently load a separate analytics script.

Account and roast records, including screenshots tied to a job, stay until you ask us to delete them or you close the account, unless we must keep a subset for tax, dispute, or legal reasons. Rate-limit counters expire on their own. Failed jobs may be kept briefly so we can debug capture errors.

DevsCult Technologies Pvt Ltd is the data fiduciary for RoastMyLanding under India’s Digital Personal Data Protection Act, 2023. You can ask us to:

• Confirm what we hold and provide a copy.
• Correct inaccurate account details.
• Erase your account and roast records, subject to legal retention.
• Withdraw consent where we rely on it (for example, optional sharing or a lead form).

Email connect@thedevscult.com. We may need to verify it is you. If you are outside India, we still handle requests in good faith; local rights may also apply depending on where you live.

RoastMyLanding is for people 18 and over using it in a business or founder capacity. We do not knowingly collect data from children.

We will update this page when the product or the law changes. The date at the top is the current version. Material changes will be posted here; keep using the service after that date means you accept the updated policy.

DevsCult Technologies Pvt Ltd
Pune, Maharashtra, India
connect@thedevscult.com