Privacy Policy for RoCode.app

Last Updated: October 2026

1. Introduction

Welcome to RoCode.app. RoCode is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

The data controller for the personal data described in this policy is Abdullah Hasan, a sole trader trading as RoCode, at 5 Cape Close, Barking and Dagenham, London IG11 8NE, United Kingdom, contactable at support@rocode.app. We are based in the United Kingdom, and we process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are in the United Kingdom or the European Economic Area, this policy explains the rights you have over your data and how to exercise them.

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use the service.

• Personal Information: When you register for an account, we collect your email address. Sign-in uses a one-time verification code sent to that email, or optional Google / Discord sign-in; we do not collect or store passwords.
• Payment Information: We do NOT collect or store your credit card information. All payments are processed securely by Paddle, our merchant of record. We only receive a confirmation from Paddle of your payment status.
• Usage and Conversation Data: We collect and store the prompts you submit to the AI and the responses you receive. This conversation history is linked to your account to provide you with a continuous experience.
• Model Consent: When you accept the note for Claude Sonnet 5.5, Claude Opus 5.5 and GPT-6 Astra, we store the time you accepted.
• Technical and Product Analytics Data: We automatically collect limited technical and product-usage information to operate, secure, and improve the service. This includes pseudonymous visitor and session IDs, page paths, feature and reliability events, successful Studio verification signals, campaign tags you arrived with (such as UTM values), the referring site's hostname, browser type, operating system, and IP address used for security and rate limiting. We record only the advertising platform associated with a click ID, not the click ID itself. Pseudonymous analytics events may be linked to your account after you sign in so signup, activation, and subscription reporting is not counted twice.
• Session Recordings (Microsoft Clarity): On our public pages and signed-in pages (not login), we use Microsoft Clarity to record how visitors use the site, such as clicks, scrolling and page layout, and to build heatmaps, so we can find confusing or broken parts and improve them. Everything you type is hidden, and so are your chat messages, prompts, code, conversation titles, email address, invoices and API keys. Page elements such as buttons, menus and error messages are recorded so we can find and fix problems. Clarity sets cookies and is provided by Microsoft, which processes this data under the Microsoft Privacy Statement. If you previously declined recordings on this site, Clarity stays off for you.
• Country Attribution and Scale Measurement: When available from the hosting edge, we store a coarse two-letter country code with product analytics events and visitor first/last-touch fields. This is used to decide when localized pages may unlock and to measure acquisition quality. We do not use precise location or street-level geolocation. Paid-ad spend figures entered by operators are measurement records only and do not change your account data.
• Lifecycle Communications: We record which onboarding, successful-build, inactivity, or cancellation-rescue email was sent so retries are idempotent and you are not sent the same message repeatedly. You can turn off these lifecycle emails from the link in each message; essential authentication, security, billing, and payment-recovery emails are unaffected.
• Checkout and Subscription Journey: We record the plan and billing period selected, the product surface that opened checkout, a coarse device category (desktop, tablet, mobile, or unknown), and whether checkout was completed, expired, or recovered. We do not store full payment-card details. If you begin cancellation, we record the reason category and any optional feedback you provide, together with whether you kept, changed, paused, or canceled the subscription. This is used to improve checkout reliability, measure voluntary and payment-failure churn separately, prevent repeated retention offers, and honor your billing choice.
• Referrals: If you create a referral link, we store your referral code, discount-code identifier, click and conversion counts, retained-referral outcomes, quality scores used to allocate incentives toward cohorts that verify and retain, and a 45-day attribution window for referred signups. Self-referrals are blocked.
• Experiments: We may assign a pseudonymous visitor or account to a product variation and record when that variation is shown. This is used to compare product outcomes and does not involve selling your information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our services.
• To create and manage your account and process your subscriptions.
• To improve our AI models and the overall user experience.
• To communicate with you, including sending sign-in verification codes and important service announcements.
• To provide relevant onboarding and lifecycle guidance based on setup and verified-build milestones, subject to your email preferences.
• To prevent fraud and ensure the security of our platform.

Our legal bases under the UK GDPR. We rely on the following legal bases for the processing described above:

• Performance of a contract: creating and running your account, delivering the Service, sending sign-in verification codes, and processing your subscription and payments.
• Legitimate interests: keeping the Service secure, preventing fraud and abuse, enforcing rate limits, measuring product usage and reliability, improving the Service, and sending onboarding and lifecycle emails about a product you already use. You can object to processing based on legitimate interests at any time, and you can switch off lifecycle emails using the link in each message.
• Legal obligation: retaining billing and tax records, and responding to lawful requests.
• Consent: where we ask for it specifically. You can withdraw consent at any time, which does not affect processing carried out before you withdrew it.

4. How We Share Your Information (Our Sub-Processors)

We do not sell your personal information. We only share your information with trusted third-party service providers who help us operate the service. These include:

• Supabase: Our backend provider for database hosting and user authentication. They store your user account information and conversation history.
• Google / Discord: If you choose social sign-in, those providers authenticate you and share your email so we can create or sign you into your RoCode account. We only keep the email (not name, avatar, or other profile fields). The same email always maps to the same account whether you use email codes, Google, or Discord.
• Paddle: Our merchant of record for all subscription payments (Paddle.com Market Ltd). We share your email and account ID with them so they can take payment, apply tax and issue invoices. Paddle handles your card details under its own privacy policy.
• OpenRouter and the AI model providers: We send your prompts and conversation history to OpenRouter's AI routing services to generate responses. OpenRouter passes them to the company that runs the model for that request. DeepSeek V4 Flash, made by DeepSeek, and GPT-OSS 120B, made by OpenAI, are the free models and run only on US based hosting companies. GLM 5.3 is made by Z.ai and runs on Z.ai or on other hosting companies that OpenRouter picks. Claude Sonnet 5.5 and Claude Opus 5.5 are made by Anthropic and run on Anthropic, Amazon Web Services or Microsoft Azure. GPT-6 Astra is made by OpenAI and runs on Microsoft Azure or OpenAI. If GLM 5.3 is unavailable, DeepSeek V4 Flash can finish the run, on the same US based hosting companies. Your data is subject to OpenRouter's API policies and to the policies of the company that runs the model.
• Resend: Our email delivery provider for transactional, onboarding, lifecycle, and payment-recovery messages. We share your email address and the message content required for delivery.

We have agreements with these providers to ensure they use your information only to provide services to us and protect it with appropriate security measures.

International transfers. The providers listed above are located outside the United Kingdom, principally in the United States. Where personal data is transferred outside the UK, we rely on the data processing terms each provider publishes, which incorporate UK-approved transfer safeguards such as the UK Addendum to the European Commission Standard Contractual Clauses. If you want to know which safeguard applies to a particular provider, contact us and we will point you to that provider's current terms.

5. Data Security

We use industry-standard security measures, including HTTPS, to protect your data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal data for as long as your account is active. optional free-text cancellation feedback is cleared after 180 days, and raw checkout-attempt records are deleted after 400 days. Expired referral click attributions are marked expired after 45 days. If you choose to delete your account, your personal information and conversation history will be permanently deleted from our systems in accordance with the data deletion process.

7. Your Rights

If you are in the United Kingdom or the European Economic Area, you have the following rights over your personal data:

• Access: ask for a copy of the personal data we hold about you.
• Rectification: ask us to correct data that is inaccurate or incomplete.
• Erasure: ask us to delete your personal data. You can do this yourself at any time from your "My Account" page. Deleting your account is permanent and irreversible.
• Restriction: ask us to limit how we use your data while a concern is being resolved.
• Portability: ask for the data you provided to us in a structured, commonly used, machine-readable format.
• Objection: object to processing we carry out on the basis of legitimate interests, including profiling, and object to direct marketing at any time.
• Withdraw consent: where we rely on consent, withdraw it at any time.

You can turn off optional lifecycle emails using the preference link in each such email. To exercise any other right, contact us at support@rocode.app. We will respond within one month. We do not charge a fee for these requests in normal circumstances.

Complaints. If you are unhappy with how we have handled your personal data, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint, or to your local supervisory authority if you are in the European Economic Area. We would appreciate the chance to address your concern first.

8. Children's Privacy

The service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@rocode.app