Privacy Policy

1. Who we are

Worth My Rock (worthmyrock.com) is operated by EVO TECH (sole proprietor / FOP, Ukraine). This policy explains what data we collect and how we handle it.

2. What data we collect

• Account email — used for passwordless (magic-link) sign-in.
• Photos you upload — the images of rocks/crystals you submit for identification.
• Identification results saved to your collection (name, properties, estimated value, authenticity notes).
• Payment information — your name/email from the payment receipt (we never see or store card numbers).
• Usage & technical data — pages viewed, approximate region, device/browser, via analytics.

3. Payments

Creem.io is our Merchant of Record and payment processor. Card and billing data are handled entirely by Creem and its processor (Stripe); we do not store your card details.

4. How we use your data

To run the identification service, maintain your account and collection, process payments and entitlements, provide support, and improve the product. Uploaded photos are sent to our AI provider to generate the identification and are stored so you can view them in your collection.

5. Who we share data with (subprocessors)

We do not sell your data. We share it only with the service providers needed to run Worth My Rock:

• Creem.io — payments / Merchant of Record.
• Supabase — database, authentication and image storage.
• Vercel — website hosting.
• OpenRouter & Google (Gemini) — AI processing of your uploaded photos to identify specimens.
• Resend — sending sign-in and account emails.
• Google Analytics — anonymous usage measurement.

Uploaded images are processed by a third-party AI provider (OpenRouter / Google Gemini) solely to produce your result.

6. Storage & retention

Account data, saved identifications and uploaded photos are stored in Supabase (EU region) for as long as your account is active. Delete a saved specimen at any time, or email us to delete your account and associated photos.

7. Your rights

You may request access to, correction of, or deletion of your personal data by emailing support@worthmyrock.com. We honour applicable rights under GDPR and similar laws.

8. Cookies

We use essential cookies for sign-in and a limited free-usage counter, and analytics cookies (Google Analytics) to understand usage. You can block cookies in your browser; essential sign-in functionality may then be affected.

9. Contact

Privacy questions? Email support@worthmyrock.com.