RostrLab

Privacy

What we collect, what we do with it, and what we never do.

Last updated September 12, 2026. RostrLab is run by 678 Agency LLC, Brooklyn, New York. Questions: support@rostrlab.com.

The short version

  • We collect what you type into the product and the brand emails you choose to send it. Nothing else.
  • We never sell your data, never show it to other customers, never use it to train models, and never read it by hand unless you ask us to fix something.
  • You can export everything or delete your account by asking. Deletion is complete within 30 days.
  • One cookie, for signing in. No tracking pixels, no ad networks, no analytics that follow you around the web.

What we collect

  • Your email address, to sign you in. There is no password.
  • Your brief: name, handle, what you do, where people follow you and how many, your rates, brands you have worked with, how you get paid, and what you put in the product afterwards (brand asks, deals, invoices, notes).
  • Brand emails that you forward to your RostrLab address, or that brands send to it because you replied from it. We read them by machine to turn them into a brand ask and to draft a reply for you to approve.
  • Media kits you publish on the free builder: the text, numbers and photos you add. A published kit is public by design; that is its purpose.
  • Support tickets you send from inside the product.
  • Payment details go to Stripe, not to us. We keep a customer id, the plan you are on, and whether the last payment succeeded.
  • Basic request logs (IP address, browser, time) kept by our hosting provider for security and debugging, for a short period.

What we use it for

  • Running the product for you: your pages, your drafts, your invoices, your media kit.
  • Sending email on your behalf when you press send, and sending you the email a brand sends back.
  • Telling you things you need to know: a new brand ask arrived, a payment failed, a sign-in link.
  • Fixing things when you send a ticket. That is the only time a person at RostrLab looks at your account, and only at what is needed to fix it.

We do not send marketing email to product users. If we ever want to, we will ask first.

Who else touches it

We use a small number of providers to run the service. Each only gets what it needs to do its job.

  • Vercel (hosting and storage, United States). Your data is stored in Vercel's US East region.
  • Resend (email sending and receiving). Emails you send and receive through RostrLab pass through Resend.
  • Stripe (payments). Card and bank details are handled entirely by Stripe.
  • Cloudflare (domain and DNS).
  • Anthropic (Claude), when enabled, reads brand emails and pasted messages to extract the details of an ask. Anthropic does not train on this data under its API terms.
  • Google (YouTube Data API), only if you verify a YouTube channel on a media kit, to read public channel statistics.

We do not share data with anyone else, except if the law requires it, and we would tell you unless we are not allowed to.

Security

  • Everything travels over HTTPS. Data at rest is encrypted by the storage provider.
  • Sign-in is by a one-time link sent to your email. There is no password to leak. Links expire in 20 minutes.
  • Your RostrLab email address only delivers into your account. A brand email addressed to you is never visible to another account.
  • Access to production systems is limited to the people who run RostrLab, and every change is logged.

If we ever learn of a breach affecting your data, we will tell you within 72 hours of confirming it.

How long we keep it

As long as your account exists. When you cancel, your data stays available read-only so you can export it or come back. Ask us to delete and it is gone within 30 days, except what we must keep for tax and payment records (invoice amounts and dates, not the contents of your deals). Media kits stay published until you unpublish or delete them.

Your choices

  • Export: ask and we send you everything as JSON and CSV.
  • Delete: ask and we delete your account and data.
  • Stop email: reply to any notification and say so; the product will still work.
  • Correct: everything about you is editable inside the product.

Cookies

One cookie keeps you signed in on the device you used. The public site remembers which audience you picked (company or creator) and your light or dark preference in your browser only. No third-party cookies.

Age

RostrLab is for people 18 and over. If you are under 18, please do not create an account.

Changes

If this policy changes in a way that matters, we email everyone with an account before it takes effect. The date at the top is always current.

Terms of service · Support