Privacy Policy

Workspace music plays original Roseram audio hosted by Roseram. Playback starts only when you choose it. Playlist, volume, shuffle, repeat and sleep-timer choices are stored with your workspace preferences. No third-party music embed is loaded.

Playback reporting is off by default. If you enable it while signed in, Roseram records the track, server start time, reported listening seconds and whether a play or completion threshold was reached. A daily pseudonym derived from your account identifier separates listening sessions; raw account IDs, email addresses, prompts, code and project names are not included in these playback records. Verified Roseram staff can view aggregate track performance. Turning reporting off stops future events; previously recorded history remains subject to the retention and deletion practices in this policy.

Where configured and with your permission, we use Meta Pixel and server-side conversion measurement for public marketing pages, content views, checkout starts, accepted signups, completed registrations, verified subscription trials and verified paid purchases. Conversion identifiers are pseudonymous; email marketing permission does not automatically enable Meta advertising cookies. You can change this choice here. Browser privacy signals are respected.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use roseram.com, our coding environment, launch pages, APIs, previews, billing features, communications, and connected integrations, collectively called the Service.

Third-party websites and services have their own privacy practices. This policy does not replace the notices provided by a connected repository host, database, deployment provider, AI model provider, payment processor, or other third party.

We collect information you provide, information generated through your use, and limited information received from services you choose to connect. Depending on the features you use, this can include:

If you choose microphone input, recording starts only after your action and browser permission. On supported browsers, speech recognition works without a Roseram account and may process audio through the browser provider’s speech service. Roseram receives the resulting text in your editable draft. Where browser speech recognition is unavailable, signed-in users can use our transcription fallback: up to 60 seconds of audio is sent through Roseram to Google Gemini using the configured API service and available usage allowance. Roseram does not save the audio as a recording. Sending the draft is a separate action and follows the selected chat or workspace storage rules. Canceling stops further capture; it cannot retract processing already received by a speech provider.

When you request generation or analysis, relevant prompts, instructions, code, and context may be sent to the model provider selected in the interface or chosen by intelligent routing. Providers can include our configured private systems and third-party model services. We limit transmitted context to what is reasonably needed for the request.

Only open or connect content you are authorized to process. Avoid submitting secrets, regulated data, or sensitive personal information unless the feature is expressly designed and contractually approved for that information. Generated output and activity records may be stored with your project or account to provide history, recovery, metering, and support.

We do not sell personal information for money. We disclose information only as reasonably necessary for the following purposes:

We use cookies and browser storage to maintain sessions, remember settings, preserve selected branches and referral attribution, synchronize launch countdowns, protect checkout state, and support security and diagnostics. Some connected providers may set their own cookies when you authenticate or use their embedded services.

Browser controls can remove or block storage, but doing so may sign you out, reset preferences, interrupt attribution or countdown continuity, or prevent parts of the Service from working.

Roseram can measure visits, visible promotional widgets, and clicks when measurement is enabled in site settings. On Roseram, the existing first-party setting allows measurement by default unless you have opted out or your browser requests privacy. Participating publisher sites obtain their own visitors’ measurement permission. General promotional widgets can appear without audience measurement.

This measurement system records a random browser identifier, the participating site’s origin, start date, last activity, expiry, and supported creative impression and click events. The identifier is kept in browser storage for up to 30 days and stored as a hash by Roseram. This system does not collect email addresses, private prompts, full browsing history, device fingerprints, page queries, or location. Other account, security, and service processing described elsewhere in this policy is separate.

An impression is counted when at least half of a supported widget is visible for one second. Reports can include test traffic or automated clients and are not independently verified ad-network metrics. Staff can see aggregate reports; this measurement system does not provide an audience contact list.

Each browser and participating site has its own identifier and preference. This system does not identify you across devices, inject ads into sites without installed Roseram widgets, or automatically enroll you in Google, YouTube, or Meta advertising audiences. Measurement does not subscribe you to email campaigns.

Use the controls below to change your Roseram measurement preference. Opting out stops collection and requests deletion of this browser’s audience record and recorded events. If deletion cannot reach the server, it retries when you return. A saved opt-out is retained to honor your choice; a daily aggregate opt-out count remains without your identifier. Global Privacy Control and Do Not Track disable this measurement. Publisher-site preferences must be changed on the relevant publisher site.

Audience membership expires after 30 days, and scheduled cleanup removes expired memberships and events. These controls apply to this Roseram measurement system; connected third-party services have separate privacy controls.

Publisher-installed scripts and the optional Roseram Discover desktop extension can match commercial phrases in an article locally to promotions. Article text and matched words are not uploaded by this matching feature. Keyword links are labeled Ad and can be hidden. Publishers can exclude regions or phrases, limit link counts, or deny placements. Contextual display does not itself enroll a visitor in a behavioral audience; performance reporting follows measurement preferences and browser privacy signals.

Roseram Discover is a separate, opt-in extension. It matches promotions locally to interests you choose on websites you explicitly enable. Its default local totals are not uploaded. If you separately allow anonymous performance reporting, it uses a 30-day identifier in extension storage to report creative impressions and clicks without visited page URLs, your selected interests, or your Roseram account identity. Turn off reporting in the extension to request deletion; turning off all promotions removes its registered placements.

We retain information for as long as reasonably needed to provide the Service, maintain account and transaction records, comply with law, resolve disputes, enforce agreements, prevent fraud, and preserve security. Retention varies by data type, sensitivity, account status, contractual commitments, and legal requirements.

When information is no longer needed, we delete or de-identify it where reasonably practicable. Backup copies and legally required records may remain for a limited period. De-identified or aggregated information that cannot reasonably identify you may be retained for analytics and service improvement.

We use administrative, technical, and organizational safeguards intended to protect information, including access controls, scoped provider permissions, server-side secret handling, authentication controls, and monitoring. No online service can guarantee absolute security.

Protect your account, review integration permissions, rotate exposed credentials, and report suspected unauthorized access to security@roseram.com. Never place secret keys in public repositories or public support messages.

We and our service providers may process information in countries other than where you live. Where required, we use recognized safeguards for international transfers and apply the protections required by applicable law.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal information, to withdraw consent, or to appeal a denied request. You may also have the right to complain to a data-protection authority.

Submit a request to privacy@roseram.com. We may verify your identity and authority before acting. Rights can be subject to legal exceptions, including security, fraud prevention, transaction records, the rights of others, and legal claims. Authorized agents may submit requests where permitted by law.

Transactional messages about authentication, security, billing, service operation, and requested actions are part of the Service. Marketing and launch messages include an unsubscribe method. Unsubscribing from marketing does not prevent essential account or transaction notices.

The Service is not directed to children under 13 or a higher minimum age required by local law. We do not knowingly collect personal information from children below the applicable age. Contact us if you believe a child has provided information improperly.

We may update this policy as the Service, providers, and legal requirements change. We will post the revised policy and update its effective date. Material changes will be communicated through the Service or another reasonable channel when required.

For privacy questions or requests, contact privacy@roseram.com. For security reports, contact security@roseram.com. For general legal questions, contact legal@roseram.com.