User Data and Safety

User Data and Safety applies to signed-in rBloxk account features, including:

• rBloxk Identity Center (signup, login, passkeys)
• Account Dashboard (profile, security, products, subscriptions)
• Distribution Engine and connected ad channel integrations

Marketing pages, blog, jobs, and contact forms are covered under the Privacy Policy.

• Profile: name, username, email, optional phone, optional date of birth and gender, profile photo.
• Security: password hash (if set), passkey credentials, active sessions, verification status.
• Product links: connections to rBloxk ecosystem products you enable.
• Distribution: connected Google/Meta account metadata and encrypted OAuth tokens.
• Activity: security audit events (sign-in, passkey use, account changes).

We do not store raw passwords. OAuth tokens for ad platforms are encrypted at rest.

• CSRF protection on sensitive account actions.
• Rate limiting on login, signup, and deletion endpoints.
• Short-lived access tokens and revocable refresh sessions.
• Passkey (WebAuthn) support for phishing-resistant sign-in.
• Encrypted storage for third-party integration tokens.
• Audit logging for security-relevant account events.

1. Sign in to your rBloxk account.
2. Open Dashboard → Privacy.
3. Select Download my data (JSON).
4. Save the file securely. The export includes profile fields, sessions, passkeys, linked accounts, distribution integrations, and recent audit activity.

You can also email privacy@rbloxk.com if you need help with a data access request.

1. Sign in and go to Dashboard → Privacy.
2. Select Start account deletion.
3. Type DELETE MY ACCOUNT to confirm.
4. Optionally share a reason, then confirm permanent deletion.

Deletion is permanent. Your rBloxk ID, sessions, passkeys, product links, and distribution integrations tied to your account will be removed. This cannot be undone.

• Review active sessions under Sign-in & security and revoke unknown devices.
• Register or remove passkeys from the same security page.
• Disconnect ad channels you no longer use from Dashboard → Channels.
• Sign out on shared devices after use.

If you suspect unauthorized access, phishing, or abuse involving your rBloxk account, contact privacy@rbloxk.com with your rBloxk ID or email and a brief description. For general security vulnerabilities, use security@rbloxk.com.

When you delete your account, user-linked records are removed from our identity database. Limited security or audit logs may be retained in de-identified or aggregated form where required for fraud prevention, legal compliance, or dispute resolution.