Privacy Policy

Last updated: 2026-05-13

Who we are

Rockstar Funding (the "Service") is operated by Rockstar Recruiting Services AG ("Rockstar", "we", "us"), Chamerstrasse 79, 6300 Zug, Switzerland (Company Registration: CH-170.3.046.519-6). The Service is hosted at feed.rockstar.jobs.

For privacy questions or to exercise your rights below, contact tech@rockstar.jobs.

What we collect

We collect only what we need to run the Service:

  • Account data. Email address, name, profile picture, and (if you sign in with Google) an OAuth refresh token scoped to send mail on your behalf from your own Gmail account.
  • Profile data you provide. Job title, company, email signature, calendar/booking link, alert preferences, time zone.
  • Usage data. Sign-in timestamps, count of emails sent through the mail-merge feature, edits you make to records, and aggregate counters used to populate your activity overview.
  • Content you create. Mail-merge drafts, private notes you attach to companies, manual corrections to AI-generated records.
  • Operational logs. Standard web-server access logs (IP, user-agent, request path/time) kept for security and abuse detection.

The Service also stores public-domain information about companies, funding rounds, investors, and contacts that we ingest from publicly accessible sources (press releases, company websites, public registries). This is product data, not user data — but if you are a contact whose record appears in our database and want it removed, email us.

How we use it

  • To authenticate you and keep you signed in.
  • To send the weekly funding digest you opted into (you can change your preferences or unsubscribe at any time from Settings → Notifications).
  • To let you send mail-merge emails from your own Gmail account (we do not retain copies of those emails outside the Send Log you can see in the app).
  • To improve the Service (debugging, performance, abuse prevention).

We do not sell your data. We do not use it for advertising. We do not share it with third parties except as listed below.

Third-party processors

To deliver the Service we rely on the following sub-processors. Each receives only the data it needs to perform its function:

  • Google (Gmail API). When you sign in with Google and authorize sending, we use Google's Gmail API to deliver outreach mail. Google's Limited Use policy applies; we never use the data for ads or share it with third parties.
  • Resend. Magic-link sign-in emails and digest delivery.
  • Hetzner. Cloud infrastructure hosting (Falkenstein, Germany).
  • LLM providers (OpenAI, Anthropic, DeepSeek, Groq, Google AI). We send article text and prompts to extract funding events; we do not send your account credentials or private notes.
  • Lusha. Contact-data enrichment (work emails / phones for known contacts at companies we track).
  • Scraping infrastructure (Jina, Firecrawl, Brave Search, Exa). Public-web reading for news ingest and research queries.

Limited Use of Google user data

Rockstar Funding's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, the Gmail OAuth scopes we request are used only to: (1) authenticate you and (2) send outreach mail you compose, on your behalf, from your own inbox. We do not read your inbox, do not store the body of sent messages outside your own Send Log, do not transfer Google user data to third parties except as needed to provide the Service, do not use Google user data for advertising, and do not allow humans to read your data unless we have your affirmative agreement, are required by law, or for security investigations.

Cookies

We use a single first-party cookie to keep you signed in (a NextAuth session token). No third-party tracking, no analytics scripts, no advertising tags. The cookie expires when your session ends; you can clear it at any time from your browser.

Data retention

Account data and content you create are retained while your account is active. If you ask us to delete your account, we remove your personal data within 30 days (operational logs and backups roll off automatically within 90 days). Public-domain company data may be retained for ongoing product use even after individual accounts close, but the link between your account and the data is severed.

Your rights

You have the right to access, correct, export, or delete your personal data, and to withdraw consent for processing. Contact tech@rockstar.jobs and we will respond within 30 days. EU/UK users may lodge a complaint with their local supervisory authority.

Changes to this policy

We will post material changes on this page and update the "Last updated" date above. For significant changes affecting how we use your data, we will also email account holders.

Contact

Rockstar Recruiting Services AG · Chamerstrasse 79 · 6300 Zug, Switzerland

tech@rockstar.jobs

HomeTerms of ServiceContact