Privacy notice

This website

This website sets no cookies, runs no analytics, and loads no third-party trackers. Fonts and all assets are served from this domain. If you use the contact form, it opens your own email client; nothing you type is stored by this site.

The Rosa service

The Rosa service (the Customer Portal and API) is a separate system with its own operational safeguards: processing in the UK (AWS eu-west-2, London, under the EU-UK adequacy decision), encrypted storage, API keys stored only as hashes, no personal data written to logs, and tiered retention for job artifacts: your debiased datasets and reports expire after days, not years, and trained model files are kept for up to a year so you can run inference against an earlier job.

The Run Manifest is the one job record we keep permanently. Rosa retains an immutable Run Manifest for every job indefinitely as its audit record - the data lives for days, the evidence lives for good. The manifest holds:

• Per-column statistics - for categorical columns the distinct category values and their counts; for numeric columns the minimum, maximum, and standard deviation.
• Bias-detection results - the discriminator's accuracy at recovering the protected attribute and the resulting bias score, plus the post-debiasing residual on training jobs.
• The per-feature debiasing adjustment (diagnose jobs) - indicative of how much each column will be adjusted to remove the protected signal.
• Each feature's association with the protected attribute - its measured univariate association, and on training jobs that association recomputed on the debiased output.
• Job metadata and content hashes - including the SHA-256 input hash, so anyone holding the original file can verify exactly what was processed.

It never holds the row-level data you submitted, the debiased output, or the trained model. Because those per-column statistics can include category labels drawn from your data, keep direct identifiers (names, emails, customer IDs) out of the analysis as ignored columns so they are never recorded.

You are responsible for ensuring you have a lawful basis for any personal data contained in datasets you submit to the service. Datasets are processed to deliver the service and are not used for any other purpose.

Contact and rights

Rosa is operated by Jason Lee, currently trading as a sole trader in the United Kingdom; the business will incorporate as a limited company once market demand is confirmed, and these commitments will continue under the company. For any privacy question, or to exercise your rights under UK GDPR (access, rectification, erasure, restriction, objection), email jason@rosadebias.com. You also have the right to complain to the Information Commissioner's Office (ICO).