Privacy Policy

Last updated: 13 August 2026

Privacy is built into Rotion App by design. This policy explains exactly what we do — and do not — collect when you use rotionapp.com.

1. What we do NOT collect

• Your images and logos — processed in your browser, never uploaded.
• Exported videos — generated and saved directly on your device.
• Project content — your text and settings stay in local browser storage.
• Card details — we never see or store them (handled by Paddle).
• No advertising, no selling of data, no marketing data sharing.

2. What we actually collect

a) Account data

• When you create an account: name and email address. Passwords are stored hashed, never in plain text.

b) Subscription data

• If you subscribe, we store your email, subscription status (active / cancelled) and subscription ID in Cloudflare KV — solely to verify your entitlements.

c) Technical data

• Our hosting provider (Cloudflare) records standard operational data such as IP address, browser type, and request time, for security and abuse prevention.

3. Local storage in your browser

We use browser storage (not advertising trackers) to save:

• IndexedDB: your projects and their images, so you can resume later.
• localStorage: language preference, sign-in session, and plan state.

You can clear this at any time from your browser settings — but doing so will delete your locally saved projects.

4. Service providers (third parties)

• Paddle.com — payment processor and Merchant of Record. Collects the billing data it needs (name, email, payment details, country) under its privacy policy. We never receive your card data.
• Cloudflare — hosting, CDN, and subscription-state storage, under its privacy policy.

Note: Arabic web fonts are self-hosted on our server and are not loaded from a third party, so no tracking occurs through them.

5. Legal bases and purposes

• Contract performance: managing your account, subscription, and plan features.
• Legitimate interest: service security, fraud and abuse prevention.
• Legal obligation: retaining billing and tax records (via Paddle).

6. Retention

• Account and subscription data: while your account is active.
• After account deletion: subscription data is deleted within 30 days.
• Billing records: retained by Paddle for legally required periods.
• Local browser data: remains until you delete it.

7. Your rights

You have the right to:

• Access the data we hold about you, or obtain a copy.
• Correct inaccurate data.
• Request deletion of your account and data.
• Object to or restrict processing.
• Lodge a complaint with your local supervisory authority.

To exercise any of these, email support@rotionapp.com; we respond within 30 days.

8. Security

We use encryption in transit (HTTPS), hash passwords, and cryptographically verify payment notifications before accepting them. That said, no method of transmission or storage is 100% secure.

9. Children

The service is not directed at children under 13, and we do not knowingly collect their data. If you believe we have, contact us for deletion.

10. International transfers

Your data may be processed on servers in other countries via our providers (Cloudflare and Paddle), who apply appropriate contractual safeguards.

11. Changes to this policy

We may update this policy; the date at the top will change. For material changes, we will try to notify you by email or an in-app notice.

12. Contact