Roketfy

GDPR overview

No level of implementation is described. A full-text search of the fourteen archived pages returns no occurrence of GDPR, General Data Protection Regulation or KVKK, Turkey's own data protection law. There is no Article 27 EU representative, no named data protection officer and no dedicated privacy address, support@roketfy.com being the only contact published. No DPA is offered and no subprocessor list exists. The publisher is established in Turkey, a third country under the GDPR, and the privacy policy states Country refers to: Turkey. Transfers are covered only by a generic clause under which consent to the policy counts as agreement to data being moved and held outside the user's jurisdiction. The named GDPR rights of access, rectification, erasure, objection and portability do not appear as such; only a general right to deletion is stated. The policy also links to a Free Privacy Policy template article.

Who owns the data?

Roketfy's privacy policy positions the company as the controller of the personal data it collects: email address, first and last name, address, state, province, postcode and city, plus Usage Data gathered automatically. Users keep the right to view, change or delete that data from their account settings or by contacting the publisher, though Roketfy reserves the right to retain records where a legal obligation or another lawful basis applies. Card details never enter Roketfy's own database; Stripe holds them. In a merger, acquisition or asset sale, personal data may be transferred, with prior notice announced. Nothing in the terms claims or assigns ownership of the content the AI produces for you.

Reuse rights

The privacy policy lists the purposes: running and maintaining the service, managing accounts, performing the contract, contacting users by email, phone, SMS or notification, sending offers about similar goods and services on an opt-out basis, handling requests, business transfers, and analysing usage trends and campaign effectiveness. Data may be shared with service providers who monitor and analyse usage, with affiliates, business partners, other users in public areas, in a business transfer, and with consent. Usage Data collected automatically includes IP address, browser type and version, pages visited, timestamps, time spent, device identifiers and diagnostic data. Traffic is announced as encrypted with TLS 1.2 or higher, and data at rest with AES 256. Keyword Research states that it collects no shop data because it does not ask for an Etsy API connection. On whether customer data feeds AI model training, the site says nothing at all, in either direction, and offers no opt-out; the terms grant users a licence to use Roketfy's intellectual property but set no rule on reusing the outputs.

Data retention & training

Hosting summary

Roketfy declares no hosting location. Searches across the fourteen archived pages return no mention of AWS, Google Cloud, Azure, a data centre or any hosted-in statement. The privacy policy says only that information is processed at the company's operating offices and in any other places where the parties involved in the processing are located, and that data may be transferred to and kept on computers outside the user's jurisdiction. The company is established in Turkey and the policy states Country refers to: Turkey, which points to Turkish processing without confirming where servers sit. Card data is the one clear case: Stripe holds it, not Roketfy. Encryption is announced as TLS 1.2 or higher in transit and AES 256 at rest. One technical observation, which the site does not make itself: roketfy.com resolves to 172.67.71.13, a Cloudflare anycast node on AS13335. That identifies a CDN front end and says nothing about where application data is stored. Buyers with a data-residency requirement will have to ask directly.