Privacy Policy

This policy explains what MemphisRoast collects, why, how long we keep it, who we share it with, and your choices. It's part of our Terms of Service.

What we collect

• Account: when you sign in with Google we receive your name, email address and profile picture from Google. If phone sign-in is offered, your phone number. Your username, ratings, record and match history.
• Age confirmation: you confirm you're 18+ and enter your birthdate. We use the birthdate once to check you're an adult and don't store it; we store only that you confirmed and when.
• Matches: live video and audio during matches, a recording of each match, transcripts of what each player said (with word timings), delivery stats, the AI judge's scores and verdict, and moderation results.
• Safety: reports you file or that are filed about you, moderation decisions, and snapshots of related match data and camera frames.
• Technical: IP address, device and browser information, and error logs (to keep the Service working and prevent abuse). Analytics only if you tap "Allow" on the analytics banner.
• Legal acceptance: which version of the Terms and Privacy Policy you agreed to and when.

We do not collect government IDs, and we do not use face recognition or create biometric templates or identifiers.

How we use it

• To run matches: matchmaking, video, turn timing, transcription, and AI judging.
• To keep people safe: automated systems (including third-party AI services) analyze sampled video frames and transcripts for nudity, sexual content, and threats; we review reports and enforce our rules.
• To show public profiles, leaderboards, and clips both players chose to share.
• To secure the Service, prevent fraud and ban evasion, fix bugs, and comply with law.

How long we keep it

• Raw match recordings: 7 days, for safety review only, then automatically deleted, unless a recording is part of an open safety case, legal hold, or legal request.
• Clips: only if both players opted in, until either player or we remove it.
• Transcripts, verdicts and match history: while your account exists, then deleted or de-identified.
• Bans: we keep a keyed one-way hash of a banned phone number or account identifier to stop ban evasion.
• Safety reports and evidence: as long as needed for safety, legal claims, and legal obligations.

Who we share it with

We don't sell or rent your personal information or share it for cross-context behavioral advertising. We share it only:

• With service providers who process it for us under contract: Supabase (accounts, database, storage), Vercel and Fly.io (hosting), Upstash (matchmaking), LiveKit (live video and recordings), Deepgram (speech-to-text), Anthropic (AI judging and safety analysis), Google (sign-in), and, if enabled, Hive (content moderation), Creatomate (clip rendering), Twilio (text messages), Sentry (error reports) and PostHog (analytics, only with consent).
• With your opponent, who sees and hears you during a match, and publicly for clips you both agreed to share.
• With law enforcement or others when required by law, to protect someone's safety, or to report suspected child sexual exploitation to the National Center for Missing & Exploited Children.
• In a merger, acquisition, or sale of assets, subject to this policy.

Your choices and rights

• Turn analytics on or off with the banner (clear site data to see it again).
• Request access to, correction of, or deletion of your data, or a copy of it, by emailing privacy@memphisroast.tv. We'll verify your request and respond within the time required by law. We won't discriminate against you for exercising your rights.
• California residents have rights under the CCPA/CPRA, including to know, delete, correct, and limit use of sensitive information. We don't sell or share personal information as those terms are defined.

Children

MemphisRoast is only for adults 18 and older. We don't knowingly collect information from anyone under 18. If we learn an account belongs to a minor, we suspend it and delete its data except where we must keep it for safety or legal reasons. If you believe a minor is using the Service, report them in the app or email safety@memphisroast.tv.

Security

We use encryption in transit, access controls, row-level security, and limited data retention. No system is perfectly secure; if a breach affects you, we'll notify you as required by law.

Changes and contact

We'll post updates here and, if material, ask you to accept them in the app. Questions: privacy@memphisroast.tv.