GDPR Compliance
Last updated: October 13, 2026
Data controller
Bromance Software SRL, Belgium (VAT BE1040.904.426), hello@heyroger.ai. What we process is described in the Privacy Policy.
Legal bases
- Contract: your account, connected tools, answering your AI assistant, applying the changes you confirm, Activity, Ask Roger, billing.
- Legitimate interest: security, abuse prevention, fair use, error tracking, aggregated analytics, onboarding emails (you can unsubscribe), invitation emails to colleagues.
- Legal obligation: accounting records.
- Consent: website analytics and ad cookies, and the access you grant to Google, Meta and other tools.
Where your data goes
Roger returns the data you ask for to the AI assistant you connected (Claude, ChatGPT or another MCP client), where that assistant’s terms and your plan settings apply, and shares it only with the sub-processors listed on /privacy/ (for example Anthropic when you use Ask Roger). Roger never trains models on it.
Roger’s app, database and files are hosted in the EU. Sub-processors in the US (such as Anthropic, OpenAI, Google, Meta and Stripe) rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Your rights
Access, rectification, erasure, portability, objection, restriction and withdrawal of consent. Email hello@heyroger.ai; we answer within one month. Invited people can stop reminders with the unsubscribe link.
Deletion
Deleting a workspace or closing your account removes its data within 30 days and revokes connected tool tokens. Activity is deleted after 25 months, tool call records after 90 days, Ask Roger text after 30 days. Backups rotate within 90 days. Invoices are kept as Belgian law requires.
Security
TLS in transit, OAuth tokens encrypted at rest, individual sign-in with roles per website, guardrails checked in code, Activity that cannot be edited, restricted production access, breach notification within 72 hours where required. See our security page.
Cookies
Until you click Accept on our website’s banner, Google Tag Manager does not load and no analytics or ad tags run. Change your choice any time with “Cookie settings” in the footer.
| Cookie | Purpose | Duration |
|---|---|---|
roger_consent | Your Accept or Decline choice (strictly necessary) | 12 months |
roger_locale | Your language | 12 months |
roger_mkt_ref | Referral code, only after Accept | 30 days |
| Google Analytics and ad cookies | Visits and campaign results, only after Accept | Up to 2 years |
Complaints
Belgian Data Protection Authority: autoriteprotectiondonnees.be.
