Privacy Policy

Who is responsible for your information

RIGDEX (“we”) is responsible for your personal information as described in this notice.

For privacy questions, requests, or complaints, contact us at alkein.developments@gmail.com. For other legal matters, use alkein.developments@gmail.com.

This contact address is provisional for our early launch and may be replaced with a dedicated address later.

Information we collect and where it comes from

Account and identity data you give us: your email address, authentication identifiers, display name, avatar, and profile details. We do not sell or knowingly collect government identification.

Content you publish: profiles, PC builds, parts lists, prices you enter, photographs, captions, comments, reactions, follows, and reports. You choose what to publish.

Authentication and security data generated by using the Service: sign-in and sign-out events, session tokens, and short-lived flow state (for example, signup, magic-link, password-recovery, and invite state).

Technical data automatically received when you connect: IP address, device and browser type, and request metadata used for security, abuse prevention, and delivering pages.

Data from third parties you choose to connect: if you sign in with Google or Discord, we receive the basic profile and email the provider releases so we can create or match your account.

We do not operate analytics, advertising, or cross-site tracking storage. We use only strictly necessary first-party cookies and similar storage to run the Service, keep you signed in, and keep it secure.

Why we use your information and our lawful bases

To create and operate your account and authenticate you (necessary to provide the Service you request; performance of a contract, and our legitimate interest in a secure log-in).

To publish, host, format, and display the content you choose to make public, and to power sharing, search, and social previews (performance of the Service you request; legitimate interest in operating a public catalogue).

To keep the Service safe: to detect, investigate, and act on abuse, spam, security incidents, and violations of our Terms (legitimate interest in safety and integrity; compliance with legal obligations).

To communicate with you about account actions, service notices, and legal or transactional messages (performance of the Service; legitimate interest; and, for any non-essential messaging, your consent).

To comply with law, respond to lawful requests, and establish, exercise, or defend legal claims (legal obligation; legitimate interest).

Where we rely on legitimate interests, you may object; where we rely on consent, you may withdraw it at any time without affecting prior processing. See “Your rights” below.

Content you make public, and what that means

When you publish a profile or a build, you are choosing to make that content publicly visible. Public content can be viewed by anyone, including people without an account.

Public content may be included in our sitemap, indexed by search engines such as Google, and surfaced in on-site discovery and feeds. It may also generate social preview cards (for example, Open Graph images) when links are shared on other platforms.

Once content is public, others may view, screenshot, cache, link to, or reshare it, and search engines or other services may retain copies outside our control. Making content private again, or deleting it, does not guarantee removal of copies already cached or reshared elsewhere.

If you do not want information to be public, do not include it in public profiles, builds, prices, photographs, captions, or comments.

Who we share information with

We do not sell your personal information. We share it only with the categories of recipients below, and only as needed.

Infrastructure and hosting: Supabase (authentication, database, and file storage) and Vercel (application hosting and content delivery).

Communications: Resend (transactional and authentication email delivery).

Identity providers you choose: Google and Discord, when you use them to sign in.

Future service providers: if we introduce paid features or Dex+, we may engage payment and tax processors; we will update this notice and our vendor list before doing so.

Legal and safety recipients: regulators, courts, or law-enforcement where we are legally required or permitted, and professional advisors, in each case limited to what is necessary.

Business transfers: if we are involved in a merger, acquisition, or asset sale, information may transfer to the successor, subject to this notice.

International processing

Our providers may process and store information in countries other than the one where you live, including outside the Philippines and outside the EU/UK.

Where personal information is transferred internationally, we rely on appropriate safeguards where required by law, such as standard contractual clauses or an equivalent lawful transfer mechanism. You may request more information about these safeguards using the contact details above.

How long we keep information

We keep personal information only as long as needed for the purpose it was collected, then delete or anonymize it. Retention criteria include: how long your account is active, our legal and tax obligations, security and abuse-prevention needs, and the need to establish, exercise, or defend legal claims.

Account and public content are retained while your account is open. Security logs and authentication events are kept for a limited period appropriate to detecting and investigating abuse.

Deleting your account and residual copies

You can request deletion of your account. When you delete your account, we remove or de-identify your public profile and content from the live Service.

Some data persists for a limited time after deletion: encrypted backups cycle out on a rolling schedule, and copies may remain in those backups until they expire; caches and content delivery layers clear on a delayed basis.

We may retain a limited subset longer where necessary: records of moderation actions and reports (to enforce our rules and prevent repeat abuse), information under a legal hold, and records we are legally required to keep. Retained records are minimized and access-restricted.

As noted above, public content that others cached or reshared before deletion may persist outside our systems and beyond our control.

Your rights

Subject to your local law, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it.

Philippines (Data Privacy Act of 2012): you may exercise your rights as a data subject, and you may lodge a complaint with the National Privacy Commission if you believe your rights have been violated.

EU/UK (GDPR / UK GDPR), where applicable: you also have the right to lodge a complaint with your local supervisory authority.

United States, where applicable: depending on your state, you may have rights to know, access, correct, delete, and to opt out of “sale” or “sharing”; we do not sell or share personal information as those terms are defined.

To exercise any right, contact alkein.developments@gmail.com. We will verify your request and respond within the timeframe required by applicable law. Exercising your rights will not lead to discriminatory treatment.

Providing some information is necessary to use the Service (for example, an email to hold an account); if you choose not to provide it, we may be unable to offer that part of the Service. This is a contractual/operational requirement, not a legal obligation to provide it.

Children and age requirement

The Service is intended only for people who are 18 years of age or older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

If you believe someone under 18 has provided us information, contact alkein.developments@gmail.com and we will take appropriate steps to remove it.

Security and breach contact

We use administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, and provider-managed storage security.

No method of transmission or storage is completely secure, and we cannot promise absolute security. You are responsible for keeping your credentials confidential.

If you believe your account or our security has been compromised, or you want to report a vulnerability, contact alkein.developments@gmail.com. Where the law requires, we will notify affected users and regulators of a qualifying breach.

Changes to this notice

This notice is effective on July 20, 2026 and was last updated on July 20, 2026. We may update it as the Service or the law changes.

When we make material changes, we will update the “last updated” date and, where appropriate, provide a more prominent notice. Continued use of the Service after an update reflects the updated notice, but any activity that legally requires consent will still rely on a separate, specific consent.