Privacy Policy

Account information: your email address and password (handled by our authentication provider; we never see or store your raw password).

League and roster data:when you connect a league, we pull rosters, scoring settings, matchups, and transaction data from ESPN, Yahoo, or Sleeper's own APIs. For Yahoo and ESPN, connecting requires an access token or session credential, which we store encrypted and use only to keep pulling your league's data on your behalf.

Usage data:which features you use, how often, and the AI-generated recommendations we've produced for you. This is what powers your Pulse history and lets support diagnose an issue with your account.

Payment information: handled directly by our payment processor (Stripe) once billing is live. We store a reference to your subscription, never your card number.

We use your league and roster data to compute the things Rostiro is actually for: a Health Score per league, start/sit and trade recommendations, waiver priority, and the daily Pulse list. All of that scoring happens in our own deterministic code: the same inputs always produce the same verdict.

AI processing disclosure:Rostiro uses Anthropic's Claude API to turn an already-computed verdict into a short, plain-English explanation of why. Claude never decides your lineup, waiver claim, or trade grade; it only narrates a decision our own code already made. The relevant roster and matchup context for that explanation is sent to Anthropic's API to generate it, governed by Anthropic's own API terms. We do not use your data to train our own models.

We don't sell your data. We share it only with the services that make Rostiro work: ESPN, Yahoo, and Sleeper (to read the league data you've connected), Anthropic (to generate AI explanations, above), Stripe (to process payments), and OneSignal (to deliver push notifications, only if you've turned them on). Each of those services has its own privacy policy governing what it does with data it receives.

Export:download everything Rostiro has on your account, any time, from Settings → Data & privacy.

Deletion: permanently delete your account and every row tied to it: connected leagues, Pulse history, AI query logs, notification subscriptions, from the same Settings page. This is irreversible and takes effect immediately.

Disconnect a league: remove a single connected league at any time from Settings without deleting your whole account.

We keep your data for as long as your account is active, so Rostiro can keep computing Health Scores and Pulse history against it. If you delete your account, everything tied to it is removed immediately. There is no retention period afterward.

We use one first-party session cookie, set by our authentication provider, to keep you signed in. We don't use third-party advertising or tracking cookies.

Rostiro is not directed at, and we do not knowingly collect information from, anyone under 13 years old.

If this policy changes in a way that matters to how your data is handled, we'll post the update here with a new “last updated” date.

Questions about this policy or your data? Reach us at privacy@rostiro.com.