Privacy Policy

1. Introduction

This Privacy Policy explains how ROGA AI Limited (“we,” “us,” or “our”) collects, uses, and protects your information when you use Search.sh and its API, website, and related services (the “Services”).

We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and authentication credentials. Passwords are hashed and never stored in plain text.

2.2 API Usage Data

• Search queries submitted via the API
• API key identifiers (keys are stored as SHA-256 hashes)
• Credits consumed and usage timestamps
• Search mode and region preferences

2.3 Technical Information

• IP address (used for rate limiting on the free tier)
• Browser type and device information
• Page views and interaction data

2.4 Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or bank details. We receive only transaction confirmations and amounts.

3. How We Use Your Information

• Process and respond to your search queries
• Manage your account, API keys, and credit balance
• Process payments and maintain purchase records
• Enforce rate limits and prevent abuse
• Improve search quality and service reliability
• Comply with legal obligations

We do not use your search queries to train AI models. Queries are processed in real time and not retained beyond usage logging.

4. How We Share Your Information

We do not sell your personal information. We share data only with:

• Stripe — payment processing
• Supabase — authentication and database hosting
• Search providers — your search queries are sent to third-party search APIs to retrieve results
• AI model providers — queries and search results are sent to AI providers to generate answers
• Law enforcement — when required by law or legal process

5. Data Security

We implement appropriate security measures including:

• API keys stored as SHA-256 hashes
• Encrypted data in transit (TLS)
• Row-level security on all database tables
• Regular security reviews

No system is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your data as follows:

• Account data — until you delete your account
• Usage logs — retained for 12 months
• Purchase records — retained as required by tax and financial regulations
• IP addresses (free tier) — stored in memory only, cleared on server restart

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability

To exercise these rights, contact us at privacy@search.sh.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

9. Children's Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use constitutes acceptance.

11. Contact

For privacy-related inquiries: