Legal

Privacy Policy

Last updated: April 30, 2026

1. Who controls your data

The data controller for roushan.xyz is Roushan, Inc., a Delaware corporation ("Roushan", "we", "us"). For privacy questions or to exercise the rights below, write to hello@roushan.xyz.

2. What we collect

Application data: name, email, social/GitHub links you choose to share, free-text answers, and an optional uploaded deck or portfolio file.
Contact-form data: name, email, optional subject, message body.
Server-side logs: standard request metadata (IP, user agent, timestamps) retained for security, debugging, and abuse prevention. Typically held for less than 30 days.

We do not collect special-category data (race, health, religious beliefs, etc.) and will not ask you to provide it.

3. How we use it

To evaluate your application or respond to your message.
To send a one-time confirmation email after you submit a form.
To detect and prevent abuse of the Site.
To comply with legal obligations.

We do not sell your data. We do not use it to train AI models. We do not share it with advertising or analytics networks.

4. Where it lives

Form submissions are stored in our database, hosted on infrastructure operated by our service providers in the United States and Asia-Pacific. Uploaded files are stored in object storage operated by the same providers. Where data is transferred internationally, we rely on appropriate safeguards under applicable data-protection law.

5. Who we share with

Roushan personnel evaluating your application.
Service providers acting on our instructions (hosting, email infrastructure).
Where legally required (court order, lawful request).

No marketing, advertising, or data-broker sharing.

6. Cookies

We do not run third-party advertising or analytics cookies. The Site may set a small number of strictly-necessary cookies (e.g. anti-abuse tokens, session continuity) that are required for the Site to function.

7. Your rights

Subject to applicable law (including the GDPR for EU/UK residents and the CCPA/CPRA for California residents), you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion ("right to be forgotten").
Receive a copy of your data in a portable format.
Object to or restrict certain processing.
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, write to hello@roushan.xyz. We respond within a reasonable period (and within the timelines required by applicable law).

8. Retention

We keep application and contact data for as long as needed to evaluate, follow up, or comply with legal obligations — and not longer than necessary. Server logs are retained for less than 30 days under normal operations.

9. Children

The Site is not directed to children under 16 and we do not knowingly collect personal data from children. If you believe a child has submitted data through the Site, please contact us so we can remove it.

10. Changes

We'll update the "last updated" date when this policy changes. Material changes will be communicated by email if you have an active application.

11. Contact

Roushan, Inc. (Delaware, US). Email hello@roushan.xyz.