Back to home

Privacy Policy

Last updated: March 2026

ROCH Engine ("we", "us", "our") operates the ROCH Engine platform. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account data. When you create an account, we collect your email address and display name through our authentication provider (Clerk).

Payment data. Payment information is processed directly by Stripe. We do not store your credit card number, CVV, or billing address on our servers.

Uploaded images. Images you upload for processing are stored temporarily in secure cloud storage (Supabase). We do not use your images for training AI models or any purpose other than providing the requested service.

Usage data. We collect anonymized usage metrics such as processing modes selected, credit usage, and general platform interaction to improve our service.

2. How We Use Your Information

  • To provide and maintain the image upscaling service
  • To process payments and manage your credit balance
  • To send transactional emails (payment receipts, job notifications)
  • To improve our service and fix issues

3. Image Data & Zero Retention

We operate a zero retention policy for image data. Uploaded images and processed results are stored only for the duration necessary to complete processing and allow you to download the result. Images are automatically deleted from our servers after download or within 24 hours of job completion, whichever comes first.

We do not:

  • Use your images to train or fine-tune AI models
  • Share your images with third parties
  • Retain copies of your images after deletion

4. Third-Party Services

We use the following third-party services to operate our platform:

  • Clerk — authentication and user management
  • Stripe — payment processing
  • Supabase — database and temporary file storage
  • RunPod — GPU compute for image processing

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Cookies

We use essential cookies for authentication (session management via Clerk). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and all associated data
  • Export your data in a portable format
  • Object to processing of your personal data

To exercise any of these rights, contact us at the email below.

7. Data Security

We implement industry-standard security measures including encrypted data transfer (TLS/SSL), secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact

For questions about this Privacy Policy, contact us at support@rochengine.com.