Privacy

Guests provide a name and confirm their email before interacting. groaster.com stores the name and email encrypted in a limited guest record and uses private cookies to keep you signed in and reconnect your event activity. There is no password or Client Explorer guest account. groaster.com sends confirmation codes through its configured email provider, Resend or Twilio, which processes the recipient address and email content to deliver them. Consent invitations also share the recipient address and a private consent link with the email provider. Roast choices and material are encrypted, used only for event operations, and never included in Stripe metadata. Event content is scheduled for cleanup 90 days after archive, once outstanding financial and event work is settled. Payment records, auction records, and guest identities are retained for recovery and reconciliation.

Hosts authenticate through Client Explorer. Card payment processing and connected-account onboarding are provided by Stripe. Events can instead use direct organizer payments: payer names and optional contact details are encrypted and shared only with the payer and event organizer, who records money collected directly. Public totals distinguish money received from outstanding promises without displaying payer contact details.

Auction descriptions, donation recognition names, and approved sponsor ads backed by a confirmed card or direct contribution are public within the event. Bidder names, contact emails, and collection details are encrypted and shared only with the organizer and the relevant guest. Your bids and purchases stay attached to your private guest session. Confirm the same email to return on another device. Keep any recovery phrase for access to activity created before email confirmation was introduced. Commerce participation extends event access so you can return after an auction closes. An organizer can immediately hide a donation recognition name without changing the donation or payment record.

Regular roast choices, saved host sets, guest selections, and payment finalization are never sent to an AI provider. Power Roast messages and normalized photos are sent to OpenAI for safety checks using the group’s key stored encrypted in Groast. These checks include event rules and the selected target’s consent boundaries. Requests do not enable tools or ask OpenAI to store Responses, but provider retention policies still apply. Eligible Power Roast messages remain in the event’s confirmed-guest history and can be reposted after fresh checks and payment. Paid takedowns and safety removals hide the message and its reposts. Targets can disable photos or withdraw consent through their private control link. If a host explicitly requests an assisted roast-set draft, Client Explorer and its OpenAI provider process only the description the host enters and the resulting draft; the host must review and save it before use. Host-set sources and event copies are encrypted. A target veto removes submitted material and host lines assigned specifically to that person from groaster.com and the live event immediately. Optional sponsor website imports also use Client Explorer and OpenAI; historic AI interviews may also have processor records governed by those providers' retention policies. Optional auction emails require a separate opt-in in My activity and can be turned off there. Organizers are responsible for the retention of financial and identity records.