Privacy Policy

1. Who we are

This policy explains how RockAi Studio, at https://rockit.site, handles personal data when you use the studio at https://rockit.site/aistudio. Contact: support@rockit.site.

We apply the Personal Data Protection Act 2010 of Malaysia to personal data we process in providing the service.

2. Data we collect

We collect only what the studio needs:

• Account. Name, email address, a hash of your password, and, if you use Google sign-in, the Google account identifier needed to recognise you.
• Checkout. The phone number you enter for the payment bill, the package or amount, and the payment reference and status returned by the payment partner. We do not store your full card number or card security code.
• Studio activity. Prompts, settings, files you upload, generated images, video, audio, and chat, the model used, and the credits charged or refunded.
• Support. Messages you send to support, including in the in-app chat.
• Technical data. IP address, browser type, and session records, used to keep you signed in and to detect abuse.

3. How we use it

We use this data to create and secure your account, run generations, show your works, add credits after payment, issue receipts, refund a failed generation, answer support, prevent fraud and abuse, and keep the service operating. We do not sell personal data.

The legal bases we rely on are: performing the contract with you (the account, the credits, and the generations), our legitimate interest in securing the service and preventing abuse, and a legal duty where one applies, such as keeping a payment record.

4. Who we share it with

We share data with service providers who process it on our instructions:

• Model providers receive the prompt and the files required to produce the generation you asked for. They may be located outside Malaysia. Their processing is covered by their own terms as well as this policy.
• The payment partner receives the bill details needed to take payment in ringgit and to confirm whether it succeeded.
• Hosting and email providers store the service and deliver messages such as sign-in and receipts.

We may also disclose data if the law requires it, or to respond to a valid request from a public authority, or to protect users from fraud or abuse.

5. How long we keep it

We keep account data and your works while the account is open. Payment records are kept for as long as tax and accounting rules require. Security logs are kept for a shorter period, long enough to investigate abuse.

If you delete your account, we remove the profile from normal use, including the sign-in identifier, and we stop treating the remaining record as a usable account. Backup copies disappear on the normal backup cycle. A generation that a model provider has already received cannot be recalled from that provider.

6. Cookies

We use a sign-in cookie so you stay logged in, and a cookie to remember choices such as language. These are required for the studio to work. We do not use advertising cookies.

7. Security

Passwords are stored as a hash, not as plain text. Payment card details are handled by the payment partner, not stored by us. No online service is perfectly secure. Please use a unique password and tell us if you think your account has been accessed without permission.

8. Your choices

You can review and update your name and password in the account pages. You can ask us to:

• provide a copy of the personal data we hold about you;
• correct data that is wrong;
• delete the account, as described above;
• object to processing that is based on legitimate interests.

Email support@rockit.site. We may need to confirm that the request comes from you. You may also complain to the Personal Data Protection Commissioner of Malaysia.

9. Children

RockAi Studio is not for anyone under 18. We do not knowingly create accounts for children. If you believe a child has given us personal data, email support@rockit.site and we will delete the account.

10. Changes

We will post any update on this page and change the date at the top. A material change will be posted before it applies.