RoastPro ("the Service") is a desktop application for recording and analyzing coffee roasting data, together with the cloud service it connects to. This policy explains what information the Service collects, what it is used for, and how long it is kept.
1. Information we collect
a. Account information
- Email address
- Password (stored only as a hash, never in plain text)
- Email verification time, last sign-in time, account creation and update times
- Plan tier, license status and expiry, trial start date
b. Device information (for license management)
To enforce how many devices an account may use, we store the following for each device you sign in from:
- Device identifier
- Device name (the hostname configured in your operating system)
- Operating system
- Hardware fingerprint (a derived value used to tell devices apart)
- First registration time and last seen time
c. Roasting data
Data you record in the Service. Everything is written to the local database on your machine first, and mirrored to the cloud while you are signed in.
- Per-session temperature readings (BT/ET) and time series curves
- Roasting events including charge and drop, and gas/airflow changes
- Charge and drop weights, session notes, quality grades
- Green coffee details you enter (origin, varietal, process, crop year, supplier, price, and similar)
- Roaster machine settings
- QC cupping scores and participant information
d. Download and usage records
- Download time, target platform and architecture, version downloaded
- IP address and IP-derived country code
- Browser User-Agent, referrer, and campaign parameters (UTM)
- Records of detected license policy violations
2. How we use it
- Providing the Service — storing, syncing, and displaying your roasting data across devices
- Authenticating your account and verifying your license
- Enforcing terms such as the device limit
- Diagnosing failures and improving quality
- Understanding download and sign-up trends
We do not use this information for advertising or marketing profiling, and we do not sell it to third parties.
3. Processors and international transfer
We rely on the following providers to operate the Service. Your information may be stored and processed on their infrastructure.
| Provider | Purpose |
|---|---|
| Amazon Web Services | Account authentication, databases, roast curve file storage, real-time event delivery |
| Cloudflare | Website hosting, installer distribution, download request handling |
| Slack | Internal delivery of operational alerts such as sign-ups, downloads, and errors |
| OpenAI | Analysis of a batch's roasting metrics, only when you request an AI report |
These providers may operate infrastructure outside the Republic of Korea.
4. Retention
- Account and roasting data — until you close your account
- Device registrations — until that device is deregistered
- Download records and license violation records — kept for statistics and abuse handling
Where applicable law sets a different retention period, that period applies.
5. Your rights
You may request access to, correction of, deletion of, or suspension of processing of your personal information. Because roasting data is also stored in the local database on your machine, deleting cloud data does not remove the local copy — you need to delete that yourself.
6. Security
- Passwords are stored as hashes; we do not keep the original.
- Communication with the Service uses encrypted connections.
- Cloud data access is scoped to your account.
7. Contact
For questions about how we handle personal information, write to support@roastpro.app.
8. Changes
If this policy changes, we will post the change and its effective date on this page.