Privacy Policy

Last updated: 2026-07-12

Questions? Contact support@getrosteriq.io

What We Collect

RosterIQ LLC collects: your account information (email address and authentication identifiers); the fantasy-league data you connect (league settings, rosters, team names, scoring formats, transaction history including waiver bids and budgets, and platform identifiers); the access tokens or credentials a fantasy platform issues when you connect it, which we store encrypted; the content you submit (players you scout, trades you evaluate, and questions you ask the AI analyst); usage data (which features you use, and delivery and engagement events for the emails we send you); and billing status. League reads are read-only, use the access you authorized, and cover only leagues you are a member of — we never write to your league. Payments are processed by Stripe; we store your subscription status and Stripe customer identifiers, and we never see or store full card numbers.

How We Use It

Your data is used to generate the alerts, reports, and AI analysis tailored to your leagues, to send you the emails you signed up for (every non-essential email has an unsubscribe), to operate billing and prevent abuse of usage limits, to understand feature usage so we can improve the product, and to communicate with you about your account and your use of the service. Our team may access your account data when needed to support you or to debug a problem. We may also use aggregated, de-identified statistics that do not identify you — for example, how often a feature is used, or market benchmarks (such as typical winning-bid ranges) built only from connected subscribers’ leagues and normalized so that no team, manager, or league is identifiable in any derived output. We do not sell your personal data, and we do not use it for third-party advertising.

AI Processing

When you run an AI action or ask the analyst a question, the relevant league data and your question are sent to Anthropic, our AI provider, to generate the response. Under Anthropic’s commercial API terms, data submitted this way is not used to train its models. Conversation transcripts for the AI analyst are retained so your session can continue where it left off and so we can review quality.

Sharing

We share data only with the processors that run the service: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (email delivery), and Anthropic (AI analysis), each of which processes it to provide their service to us. Beyond that, we disclose personal data only if required by law, to protect the service or its users, or as part of a merger or acquisition, in which case this policy continues to apply to it. Reports you explicitly share via a public share link are visible to anyone with the link — but competitive intelligence derived from your league (budgets, bid guidance, rival reads) appears only on your own signed-in surfaces and is excluded from public share pages. If we add or replace a provider performing one of these functions, we will keep this list current.

How We Protect It

Data moves between you, us, and our processors over encrypted connections, and the credentials you use to connect fantasy platforms are additionally encrypted (AES-256-GCM) before they are stored. Access to production data is limited to operating the service. No method of storage or transmission is completely secure, so we cannot guarantee absolute security; if a breach affects your personal data, we will notify you as required by law.

Where Your Data Is Processed

RosterIQ is operated from the United States and your data is stored and processed there by us and the processors listed above. If you use the service from outside the US, you understand that your data is transferred to and handled in the US.

Cookies & Local Storage

We use only the cookies required to keep you signed in and to operate the service, plus similar local-storage identifiers in your browser that let us understand product usage (such as an anonymous browser id for first-party analytics). We do not use third-party advertising cookies or cross-site trackers, and analytics are never tied to an advertising profile.

Retention & Deletion

We keep your data while your account is active. To delete your account and data, email support@getrosteriq.io; we will complete the deletion within 30 days, except for records we are legally required to keep (such as billing and tax records) and encrypted backups that expire on their own schedule. Disconnecting a league stops new processing of that league's data.

Your Rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it by emailing support@getrosteriq.io. We honor these requests regardless of where you live, including rights granted under applicable state privacy laws. We will verify the request came from the account owner before acting on it.

Children

RosterIQ is not directed to children under 13, and we do not knowingly collect personal data from them. Accounts and purchases require you to be at least 18. If you believe a child has created an account, contact us and we will delete it.

Changes to This Policy

When we change this policy we will update the date at the top of this page, and if the change is material we will notify you by email before it takes effect.

Contact

Questions about your data can be sent to support@getrosteriq.io.