Privacy Policy

RoadBear ("we", "us") provides a product feedback and roadmap tool. This policy explains what we collect when you use roadbear.app and our boards, why we collect it, and the choices you have.

Account data: your name, email address, and password (stored hashed) when you create an account.

Content you create: workspaces, boards, ideas, comments, votes, and changelog entries.

Usage data: basic, privacy-respecting logs (such as request timestamps and error reports) needed to operate and secure the service.

Billing data: if you subscribe, payments are processed by Stripe. We never see or store your full card number.

To provide the service — host your boards, count votes, send the notifications you opt into, and resolve your custom domain.

To keep the service secure and reliable, prevent abuse, and debug problems.

To communicate essential account and transactional messages (such as email verification and password resets).

Product notifications (such as status changes on ideas you follow) are optional and only sent on paid plans. You can turn them off any time from your account, or via the one-click unsubscribe link in every such email. Transactional emails — verification and password reset — are always sent because they are required to use your account securely.

We do not sell your personal data. We share data only with service providers that help us run RoadBear — such as Stripe (billing), Cloudflare (custom domains and security), and our email and hosting providers — and only as needed to deliver the service, or when required by law.

Boards are public by design. Ideas, comments, and votes you post to a public board are visible to anyone who can see that board. Workspace owners can make individual boards private.

We keep your data while your account is active. When you delete your account or a workspace, we remove the associated data, except where we are required to retain limited records (for example, for tax or legal compliance).

You can access, correct, export, or delete your data. You can delete your account at any time from the account page, which removes the workspaces you own. For any request, contact us at [email protected].

We use industry-standard measures — encryption in transit, hashed passwords, scoped access tokens, and tenant isolation — to protect your data. No method of transmission or storage is perfectly secure, but we work hard to protect it.

We may update this policy as the product evolves. Material changes will be reflected here with a new "last updated" date.

Questions about privacy? Email [email protected] and a real person will respond.