Privacy Policy
Last updated: April 20, 2026
Rongeka is a product of Firdian Corp. This policy explains what data we collect when you use Rongeka, why we collect it, and how we protect it.
1. Information we collect
Account data — when you register, we store your name, email address, and a hashed password (or, for OAuth sign-ins, the provider token). We never store plain-text passwords.
Content data — items, collections, tags, and uploaded files you create inside Rongeka are stored on our servers and in Cloudflare R2 object storage.
Usage data — standard server logs (IP address, browser, pages visited, timestamps) for security and performance monitoring. These are retained for 30 days.
Payment data — billing is handled entirely by Stripe. We never see or store your card details. We store your Stripe customer ID and subscription status to gate Pro features.
2. How we use your information
- To provide and operate the Rongeka service
- To authenticate you and protect your account
- To process payments and manage your subscription
- To send transactional emails (email verification, password reset)
- To improve reliability and fix bugs using aggregated, anonymised logs
We do not sell your data. We do not use your content to train AI models. AI features (auto-tagging, code explanation, prompt optimiser) send the relevant item content to OpenAI solely to generate the response for you; OpenAI's API data usage policy applies to those requests.
3. Data storage and security
Your data is stored on Neon (PostgreSQL) and Cloudflare R2, both of which encrypt data at rest and in transit. Access to production systems is restricted to authorised Firdian Corp personnel.
Despite our best efforts, no system is 100% secure. Please use a strong, unique password and enable two-factor authentication where available.
4. Cookies and sessions
Rongeka uses a single session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.
5. Data retention and deletion
Your account and all associated content are retained for as long as your account is active. You can permanently delete your account from Settings → Delete Account. Deletion removes your user record, all items, collections, and uploaded files. Stripe customer data is subject to Stripe's own retention policy.
6. Third-party services
- Neon — PostgreSQL database hosting
- Cloudflare R2 — File and image storage
- Stripe — Payment processing
- Resend — Transactional email delivery
- OpenAI — AI features (Pro tier)
- GitHub OAuth — Optional OAuth sign-in
7. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Rongeka after changes constitutes acceptance of the updated policy.
8. Contact
Questions about this policy? Email us at privacy@firdian.com.