Privacy Policy

1. Who we are

Rrotex operates the website at rrotex.com and the Ro assistant for Roblox creators. This policy describes how information is handled when you use our website, account features, AI chat, and Studio connection.

For privacy questions or requests, contact rrotexai@gmail.com.

2. Information we process

• Google account information: your verified email address and name when you sign in through Google.
• Roblox profile information: your Roblox user ID, username, display name, avatar headshot URL, and profile link when you authorize the openid and profile scopes.
• Your content: prompts, conversations, chat titles, generated responses, and information you submit through available creation or support features.
• Studio connection information: a connection credential, session identifier, project name and place ID, relevant project object names and classes, requested changes, and task results when you connect the plugin.
• Technical information: necessary session cookies, browser storage, request metadata, and operational or security logs processed by our hosting and service providers. These may include IP addresses, browser information, timestamps, and errors.
• Optional transactions: if you purchase credits or other available services, payment providers process transaction and payment information. Payment card details are handled by the payment provider.

Google and Roblox handle their own sign-in pages. Our OAuth flows do not receive your Google or Roblox password. Roblox profile login does not itself authorize us to edit your game.

3. How we use information

We use information to identify your account, link your Roblox profile, show your name and avatar, save and reopen chats, generate AI responses, deliver requested Studio actions, maintain account and transaction records, provide support, prevent misuse, and operate the service.

Google sign-in is followed by a required Roblox sign-in step. Profile information is synchronized when you complete Roblox sign-in. We do not sell your personal information.

4. Service providers and disclosures

Relevant prompts and conversation history are sent to OpenRouter and the selected AI model provider to generate responses. Their processing and retention are governed by their policies and applicable service arrangements. Do not submit passwords, private API keys, or content you are not allowed to share.

We use Vercel for hosting and database services for account and chat storage. Google and Roblox process authentication requests; Roblox also supplies profile images and approved assets. If you use available payment or asset-generation features, providers such as Stripe or fal may process the information needed to fulfill those requests.

We may disclose information when required by law or when reasonably necessary to protect users, investigate abuse, or secure the service. Your chats are not published to other users by default. If you publish or share generated content yourself, its visibility depends on the destination you choose.

5. Cookies, storage, and retention

We use an essential, secure session cookie to keep you signed in. The current application session expires after seven days; temporary OAuth state normally expires after ten minutes. We also use browser local storage for device chat history and session storage to preserve a pending chat during sign-in. This policy does not describe advertising or optional tracking cookies as essential.

Account records, Roblox account links, and cloud chats are retained until removed through available controls or processed through a verified deletion request, subject to necessary operational, security, financial, or legal retention. Device history remains until it is deleted in the app or the browser’s storage is cleared. Short-lived Studio tasks and heartbeat records expire, while personal plugin credentials have an expiration and can be invalidated.

The current Roblox profile-only login flow uses access tokens to retrieve your profile and does not retain Roblox access or refresh tokens afterward. Signing out ends your Rrotex session and its Google and Roblox sign-in proofs; it does not delete saved chats or sign you out of Google or Roblox across other websites.

6. Your choices and requests

You can delete saved chats using the chat history controls, sign out of Rrotex, and manage or revoke our authorization through your Google or Roblox account settings. You can revoke the Studio plugin’s domain permission or remove the plugin. Revoking a provider authorization does not automatically erase records already stored by Rrotex.

To request access, correction, account deletion, or another applicable privacy right, email rrotexai@gmail.com. Include enough information to identify your account, such as your account email and Roblox username. We may ask you to verify account ownership before disclosing or deleting information. Do not send passwords or authentication tokens. Rights and exceptions depend on applicable law.

7. Security and international processing

We use measures such as HTTPS, server-side credentials, secure session cookies, and account-scoped access controls. No service can guarantee absolute security. Our providers may process information in countries other than your own; applicable privacy protections and provider arrangements govern that processing.

8. Age requirements

Rrotex is intended for users aged 13 and older who meet Google’s and Roblox’s applicable account and authorization requirements. We do not knowingly offer the service to children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.

9. Changes and contact

We may update this policy as the service changes. The date at the top identifies the current version. For material changes, we will provide notice through the website or another appropriate channel.

Privacy and support contact: rrotexai@gmail.com.