Effective date: June 2026
Privacy Policy
ROSTA is operated by FYNL Studio FC-LLC, registered in Ras Al Khaimah Economic Zone (RAKEZ), UAE. When this policy says “ROSTA”, “we”, “us”, or “our”, it means FYNL Studio FC-LLC operating the ROSTA platform at app.onrosta.com.
What We Collect
When you create a ROSTA account we collect your name, email address, and the professional information you choose to add to your profile — what you do, what you’re building, who you want to meet, your location, and your signals. If you pay for ROSTA Verified we collect payment information, which is processed by Stripe and never stored on our servers. If you connect at an event via Guest QR without an account, we collect your name, email, and one-line description.
We also collect technical data automatically — your IP address, browser type, and how you use the platform. We use this to keep the platform secure and working correctly.
Why We Collect It
We collect your data to provide the ROSTA service — creating your profile, facilitating introductions, sending notifications, and processing payments. We do not sell your data. We do not use your data for advertising.
Who We Share It With
We use the following third-party services to operate ROSTA. Each has its own privacy policy:
- Supabase — database and authentication hosting
- Resend — transactional email delivery
- Stripe — payment processing for ROSTA Verified
- Anthropic — AI features including intro drafting, signal matching, profile coaching, and weekly digest emails. Your profile data is sent to Anthropic’s API to generate these features; Anthropic does not use this data to train their models.
- Vercel — platform hosting
- Loops — waitlist management
How Long We Keep It
We keep your data for as long as your account is active. If you delete your account we delete your personal data within 30 days. Some data may be retained longer where required by law.
Your Rights
You have the right to access, correct, or delete your personal data at any time. To make a request, email contact@onrosta.com. We will respond within 30 days. If you are based in the UK or EU you also have the right to data portability and to lodge a complaint with your local data protection authority.
Data Transfers
ROSTA is operated from the UAE. Your data may be processed in the United States or European Union by our third-party service providers. We ensure appropriate safeguards are in place for any international data transfers.
Children
ROSTA is for people aged 18 and over. We do not knowingly collect data from anyone under 18.
Changes to This Policy
We may update this policy from time to time. We will notify members by email of any significant changes. The current version is always available at app.onrosta.com/privacy.