Last updated: March 1, 2026 · Effective: March 1, 2026
Data Controller: Hostao LLC, 30 N Gould St, Ste 4000, Sheridan, Wyoming 82801, USA
Grievance Officer: Reji Modiyil · grievance@roadmapr.in
Support: support@roadmapr.in
Roadmapr ("Service") is operated by Hostao LLC ("we," "our," "us"), a company incorporated in Wyoming, USA. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use Roadmapr.
We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection Act 2023 (DPDPA 2023).
Account Data: Name, email address, password hash (or OAuth token), profile picture (if provided via Google sign-in), company name.
Usage Data: Pages visited, features viewed, votes cast, features submitted, time spent, browser type, operating system, IP address (anonymized after 30 days).
Project Data: Roadmap projects you create, features you add, changelog entries, project settings, custom domain configurations.
Payment Data: Billing is processed by Razorpay (for INR) and Stripe (for USD). We do not store full card numbers. We receive only billing confirmation and subscription status.
Communications: Messages you send to our support team, feedback you submit, survey responses.
We process personal data under the following legal bases:
We use your data to: provide and improve the Service; process payments; send transactional emails and notifications; respond to support requests; ensure security and prevent fraud; comply with legal obligations; and (with your consent) send product updates and marketing communications.
We do not sell your personal data. We share data with:
Account data is retained for the duration of your account plus 90 days after deletion. Anonymized usage analytics are retained for 24 months. Billing records are retained for 7 years per financial regulations. You can request deletion of your account at any time via Settings → Account → Delete Account.
Depending on your jurisdiction, you have the following rights:
To exercise your rights, email grievance@roadmapr.in. We respond within 30 days.
For users in India, we comply with the Digital Personal Data Protection Act 2023. Your Grievance Officer is Reji Modiyil, reachable at grievance@roadmapr.in. Grievances will be acknowledged within 48 hours and resolved within 30 days.
California residents have the right to know what personal information we collect, to delete it, to opt out of its sale (we do not sell it), and to non-discrimination for exercising these rights. Contact us at privacy@roadmapr.in to submit a CCPA request.
Data is primarily stored on servers in the EU (Frankfurt). When data is transferred to the US (Hostao LLC), we rely on Standard Contractual Clauses (SCCs) as the legal transfer mechanism under GDPR. Enterprise customers may request data residency agreements.
We use essential cookies for authentication and session management, and optional analytics cookies (privacy-preserving). See our Cookie Policy for full details.
We use TLS/HTTPS for all data in transit, AES-256 encryption for sensitive data at rest, bcrypt hashing for passwords, regular security audits, and automatic backups. We have an incident response plan and will notify affected users within 72 hours of a data breach, as required by GDPR.
We may update this Privacy Policy. Material changes will be notified via email and an in-app banner at least 30 days before taking effect. Continued use of the Service constitutes acceptance of the updated policy.
Data Controller: Hostao LLC, 30 N Gould St, Ste 4000, Sheridan, Wyoming 82801, USA
General: support@roadmapr.in
Privacy / DPDPA: grievance@roadmapr.in
CCPA: privacy@roadmapr.in