← Rokha

Privacy Policy

Last updated: August 9, 2026

THE SHORT VERSION

Rokha measures how the product is used with first-party, cookieless analytics tied to a random session id — not to your name, wallet, or email. We honor Do Not Track. We don't run third-party ad trackers and we don't sell personal data.

WHAT WE COLLECT

  • Usage analytics — page views, feature interactions (e.g. "ran a rig", "searched the registry" — including the search terms you type into the registry, truncated and used only in aggregate to improve discovery), the page you arrived on, your referrer, and error events. These are keyed to a random per-visit session UUID plus a coarse device class (e.g. "mobile") — never your raw browser fingerprint. If you are logged in, events are additionally linked to your account's internal UUID — never to your wallet address or email.
  • Account data — what you sign up with (a wallet address, or a Google-verified email), your plan tier, and the things you create (skills, harnesses, rigs, chat sessions), stored scoped to your account.
  • Billing — payments are processed by Stripe (or on-chain for crypto top-ups). Card numbers never touch our servers. We keep a record of each purchase (what was bought, the amount, the processor, and the processor's reference), your subscription status, your plan-tier history, and your credit balances — all keyed to your account's internal UUID.
  • Abuse prevention — daily usage counters. Where an IP address is used for rate limiting, we store only a one-way hash prefix, never the raw address.
  • Bot conversations — when you message Rokha on an external surface (e.g. DMs to @rokha_agent on X Chat), your message content is processed to generate her reply, and the conversation is handled under the same per-sender limits as site chat. X Chat's encryption is between you and the bot — but as with any chat, don't send secrets; she will never ask for keys, seed phrases, or passwords. If she negotiates a promotion deal with you, the agreement terms and any settlement (with its on-chain transaction signature) are recorded; aggregate deal metrics are published anonymized, never with your identity.

WHAT WE DON'T DO

  • No third-party analytics or advertising trackers.
  • No cookies for tracking (session state lives in your browser's storage).
  • No selling or renting of personal data.
  • Do Not Track is honored: with DNT enabled, analytics capture is off entirely.

RETENTION

  • Analytics events: deleted after 90 days.
  • Analytics sessions: deleted after 365 days.
  • Anonymous (not-logged-in) work products: pruned within ~24 hours of inactivity.
  • A minimal active-week marker (your account's internal UUID and the week you were active — nothing about what you did) is kept for as long as your account exists, so we can measure whether people keep coming back after the detailed events above are deleted.
  • Account data: kept while your account is active. Billing records are kept as required by law.

SERVICE PROVIDERS

We use a small set of processors to run the service: AWS (hosting), Stripe (payments), Anthropic (the AI models that power Rokha), Voyage AI (search embeddings), Deepgram (speech-to-text), and ElevenLabs (voice synthesis). Your content is sent to the AI provider only to serve the request you make.

Voice is opt-in: the microphone records only while you hold a voice session open. Audio you speak is sent to the speech-to-text provider to transcribe your request, and reply text is sent to the voice-synthesis provider to generate spoken audio — in both cases only to serve that request. We do not store your audio; we keep only daily usage counters (requests and characters) to enforce plan allowances.

INSIGHTS & AGGREGATE DATA

We use analytics to understand what works and what breaks, and we may publish or commercialize aggregated, anonymized statistics (for example, which kinds of skills are most used). Aggregate data never identifies you and is never row-level personal data.

YOUR RIGHTS

Logged in, you can download everything we hold for your account from Profile → Your data (one JSON file). For deletion of your account, contact contact@rokha.ai — we'll respond within 30 days. Self-serve deletion is on the roadmap.

CHANGES

If our practices change, this page changes with them, with the date above updated. Questions: contact@rokha.ai.