Rokana Privacy Policy

Effective Date: June 14, 2026

Last Updated: June 14, 2026

1. Introduction

Rokana (“Rokana,” “we,” “us,” or “our”) operates a professional networking platform for investors, founders, and industry leaders at https://rokana.net (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, applications, and related services (collectively, the “Services”). By creating an account or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. Data Controller Rokana LLC United States Email: team@rokana.net Your use of the Services is also governed by our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

Account and Authentication

Full name, username (@handle), email address, and password
Optional: phone number and LinkedIn profile URL
Email verification codes and, if enabled, two-factor authentication (2FA) codes
If you sign in with Google, we receive information from Google via Firebase Authentication (such as your name, email address, and Google account identifier)

Profile and Onboarding

Headline, bio, location, and website
Profile picture and cover photo
Investor type, experience level, interests, and tags
Affiliations (e.g., company, organization, school, or university and your role)
Accredited investor status (self-declared)

Unless expressly stated otherwise, Rokana does not independently verify accredited investor status and relies on information provided by users.

Education, work experience, certifications, and projects

Content and Activity

Posts and investment opportunities (including title, description, location, asset class, investment metrics, and custom fields)
Comments, reactions, bookmarks, reposts, and express-interest actions
Direct and group messages, including message media
Organizations you create or join (name, industry, size, website, logo, and related details)
Reports you submit (target, reason, and optional details)
Support requests (category, subject, and message)

Settings and Preferences

Email and phone visibility settings (public, connections, or private)
Notification preferences (push, email, and SMS per notification type)
Account settings such as contact import opt-in, account active/deactivated status, and theme preferences

Payments

Credit wallet transactions and purchase history
Payment processing is handled by Stripe; we receive payment intent identifiers and transaction status, not full payment card numbers

Contact Sync (Optional) If you enable contact import:

Your device contacts are hashed locally using SHA-256 before transmission
We receive hashed email addresses and phone numbers only and do not receive your raw address book
Hashes are used solely to suggest connections with existing Rokana users

2.2 Information Collected Automatically

Usage and Analytics

Profile views and profile-view events
Post and advertisement impressions and views
Search appearances and engagement metrics
Anonymous session identifiers for guest impression and view tracking
Server logs including request method, URI, response status, duration, and similar technical data

Device and Technical Data

Browser type, device information, and IP address
Push notification device tokens (Firebase Cloud Messaging), if enabled
Firebase Analytics data, when supported by your browser
Affiliate-link click events and related tracking information, where applicable

Cookies and Local Storage

Authentication-related information stored on your device to maintain login sessions
User interface preferences, such as theme settings and tutorial flags
Session-scoped identifiers used to prevent duplicate view counts and improve platform functionality

2.3 Information From Third Parties

Google (Firebase): account information when you use Google sign-in
Stripe: payment confirmation and transaction metadata
Affiliate partners: information associated with affiliate referrals and tracking

3. How We Use Your Information

We use personal information to: Provide the Services

Create and manage accounts
Authenticate users
Deliver messaging, organizations, posts, and wallet functionality

Personalize Your Experience

Suggest connections
Match users with relevant opportunities
Surface relevant content and organizations

Communicate With You

Send verification codes
Deliver password resets
Provide security alerts and notifications

Process Payments

Process credit purchases through Stripe

Improve and Secure the Platform

Monitor usage
Detect abuse and fraud
Enforce policies
Debug and improve platform performance

Analytics and Product Development

Understand how features are used
Measure engagement and platform growth
Improve user experience

Legal and Safety Purposes

Respond to reports and moderation requests
Comply with legal obligations
Protect users and the platform

We do not use contact-sync hashes to reveal why a user was suggested, and we do not store raw device contacts on our servers.

4. How We Share Your Information

We do not sell your personal information. With Other Users Based on your visibility settings:

Profile information that you make publicly visible may be accessible to other users and may be indexed by search engines. Information restricted through privacy settings is not intended to be publicly accessible.
Email and phone visibility are controlled by you
Posts may be public, connections-only, or private
Messages are shared with conversation participants

With Service Providers We use trusted third-party providers to operate the Services, including:

Neon PostgreSQL database hosting Vercel Frontend hosting and delivery Firebase / Google Authentication, analytics, and push notifications Stripe Payment processing Email service providers Transactional email delivery Hosting providers API hosting, storage, and infrastructure These providers process information on our behalf under contractual obligations. Legal and Safety Reasons We may disclose information:

To comply with applicable laws and legal requests
To enforce our Terms of Service
To protect the rights, property, and safety of Rokana, our users, and others
To investigate fraud, abuse, or security incidents

Business Transfers If Rokana is involved in a merger, acquisition, financing, or asset sale, your information may be transferred as part of that transaction. Affiliate Links When you click affiliate links, you leave Rokana and become subject to the privacy policies of those third parties.

5. Data Storage and Security

Where Data Is Stored

Account and application data: PostgreSQL database hosted on Neon
Uploaded media: stored by Rokana and its infrastructure providers
Authentication information: stored on user devices to maintain login sessions

Security Measures

Passwords are stored as cryptographic hashes
Contact matching uses SHA-256 hashes
API access requires authenticated requests
HTTPS is used for data in transit
Access controls and monitoring are used to help protect platform data

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

5.1 Security Incidents

If we become aware of a security incident affecting personal information, we may notify affected users and applicable regulatory authorities as required by law.

6. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Account Deletion You may permanently delete your account through the platform settings. Deletion removes your account record and associated platform data. Account Deactivation You may deactivate your account and reactivate it later by signing back in. Verification Tokens Verification and password-reset tokens expire automatically. Logs and Analytics Operational logs and analytics data may be retained for security, operational, and business purposes. Uploaded Files Uploaded files associated with deleted accounts are scheduled for deletion as part of our account deletion process. In certain circumstances, backup copies may remain temporarily before permanent removal.

7. Your Choices and Rights

Depending on your location, you may have rights to:

Access your personal information
Correct inaccurate information
Delete your account and associated data
Restrict or object to certain processing
Export your data
Withdraw consent for consent-based processing
Opt out of marketing communications

In-App Controls

Privacy settings for contact visibility
Notification preferences
Contact-import controls
Push-notification permissions

To exercise rights not available in-app, contact team@rokana.net. We may verify your identity before responding. California Residents (CCPA/CPRA) California residents may have additional rights regarding access, deletion, correction, and disclosure of personal information. Rokana does not sell personal information as defined under California law. EEA and UK Residents (GDPR) Our legal bases for processing include:

Contract performance — providing and operating the Services you request
Legitimate interests — fraud prevention, platform security, moderation, network recommendations, analytics, product improvement, and maintaining service reliability
Consent — contact syncing, push notifications, optional profile information, and other consent-based features
Legal obligation — compliance with applicable laws and lawful governmental requests

8. International Data Transfers

Rokana is operated from the United States. Our service providers may process information in the United States and other countries. Where required by law, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent transfer mechanisms.

9. Children's Privacy

The Services are not directed to individuals under the age of 18 or the age of majority in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take steps to remove it.

10. Third-Party Links and Services

The Platform may contain links to third-party websites, affiliate partners, and external investment tools. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing personal information.

11. Copyright Complaints

If you believe content on Rokana infringes your copyright or other intellectual property rights, please contact team@rokana.net with sufficient information for us to investigate and respond appropriately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made:

We will update the Last Updated date
Material changes may be communicated through email or in-app notices
Continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy

13. Contact Us

For privacy questions, requests, or complaints: Email: team@rokana.net Support: https://rokana.net/support If you are located in the EEA or UK and believe we have not adequately addressed your concern, you may lodge a complaint with your local data protection authority.