# Privacy — roamgap

> How roamgap handles your data: what we collect, how long we keep it, who we
> share it with, and the controls you have. Source of truth: the repo's
> `specs/PRIVACY.md`.

## What we collect

The free optimizer never stores your inputs server-side. With an account we keep
your email, display name, locale, and country preference — and the searches you
choose to save.

## How long we keep it

Account data lives until you delete it. After deletion we soft-delete at once and
hard-delete within 30 days. Analytics and error logs roll off on fixed schedules
(30–90 days).

## Your rights

Exercise any of these from your account, or by emailing citizensdraft@gmail.com — we
respond within 30 days:

- **Access** — download a machine-readable copy of your data.
- **Rectification** — edit your profile in account settings.
- **Erasure** — delete your account and its data.
- **Portability** — the export is portable JSON, yours to take.
- **Objection** — withdraw analytics consent in the cookie banner.

## Cookies & consent

Nothing is set until you accept. The banner offers Accept all and Reject, with a
granular option. Do Not Track and Global Privacy Control are honoured as a
reject. Full inventory: https://roamgap.ike.work/legal/cookies

## Who we share it with

A short list of sub-processors — hosting, analytics, error monitoring, payments —
each under a data-processing agreement, except our own payment service, WiraPay,
which is operated by the same business as roamgap and is marked as such. The
current register, including who handles your payment, is at
https://roamgap.ike.work/legal/sub-processors

## Contact

Questions or a data request? Email citizensdraft@gmail.com. We don't sell your data,
and we never have.

## Source

- This page: https://roamgap.ike.work/legal/privacy
- Cookie inventory: https://roamgap.ike.work/legal/cookies
- Sub-processors: https://roamgap.ike.work/legal/sub-processors