ROCK.AR Privacy Policy

Effective Date: July 22, 2025

1. Introduction
Welcome to ROCK.AR (“we,” “our,” “us”). We’re committed to protecting your privacy and securing your personal information. This policy explains what data we collect, why we collect it, how we use it, and your rights regarding that information.

2. Information We Collect

A. Personal Information You Provide

Full name, email address, postal address, phone number
Account credentials (username, password)
Payment details (e.g., credit card, Stripe, PayPal) for purchases

B. Automatically Collected Information

Device data (IP address, browser type/version, mobile device identifiers)
Usage data (pages viewed, clicks, session duration)
Cookies and similar technologies

C. Derived or Aggregate Data

Analytics (e.g., “User A spent 10 minutes in-app today”)
Marketing preferences

3. How We Use Your Information

We collect and use your data for:

Providing and improving services – e.g., processing orders, analyzing usage, customizing features
Communications – e.g., account notifications, marketing with opt-in consent
Security and fraud prevention – monitoring, protecting accounts, and detecting unauthorized activity
Legal and compliance – adhering to laws, enforcing terms

4. Legal Basis for Processing (GDPR)

Contract performance – to fulfill orders, subscriptions, or service usage
Consent – for marketing emails, cookies, and other opt‑in features
Legitimate interest – e.g., analytics and fraud prevention, unless overridden by user privacy rights

5. Sharing Your Information

We may share data with:

Service providers (payment, hosting, analytics) acting on our behalf
Legal and regulatory authorities, when required by law or court order
Business partners, if you authorize it (e.g., for co‑marketing)
Transfer in case of business operations (merger, sale, restructuring)

6. Data Transfers

We operate globally, and some servers or subprocessors may be located outside your country. We use legal safeguards such as:

US‑EU/UK Standard Contractual Clauses
Binding Corporate Rules
Adequacy decisions

7. Your Rights

For residents of the EU/UK (GDPR):

Right to access, correct, delete your data
Right to restrict or object to processing
Right to data portability
Right to withdraw consent

For California residents (CCPA):

Right to know what is collected and shared
Right to delete personal data
Right to opt out of sale or sharing
Right to non‑discrimination

For all users:

You may disable cookies in your browser
For marketing communications, opt‑out links are provided in each email

8. Cookies & Tracking Technologies

We use cookies and similar tools to:

Remember login and preferences
Analyze site/app usage via Google Analytics, Mixpanel (or similar)
Deliver relevant marketing

You may manage or disable cookies via browser settings, noting this may affect functionality.

9. Data Retention

Account and order info: retained for as long as account is active
Usage logs: kept for [e.g., 2 years], then anonymized or deleted
Unverified or inactive accounts: deleted after [e.g., 12 months] of inactivity

10. Data Security

We implement technical and organizational measures, including:

Encrypted data storage and HTTPS
Access control policies and periodic security audits
Incident response plan

While we strive to protect data, we cannot guarantee absolute security.

11. Children’s Privacy

ROCK.AR is not intended for children under 16. If a parent believes their child has provided personal data, please contact us to have it removed.

12. Changes to This Policy

We may update this policy; revised versions will have a new “Effective Date.” Significant changes will be communicated via email or site banners.

13. Contact Us

Data Controller: ROCK.AR
Email: privacy@rock.ar
Address: 1332 N. Illinois Street, Indianapolis, IN 46202

For privacy inquiries, data access requests, or complaints, please contact our team.

Contact

ROCK.AR Privacy Policy