Show your work. Keep your data.

Who is responsible

Roughs (roughs.design) is operated by 9533-9107 Québec inc., doing business as Ulba Studio, in Quebec, Canada. The person in charge of the protection of personal information can be reached at hi@roughs.design.

What we collect

• Account: your email, your password (stored only as a secure hash), your username and your name.
• Profile: anything you add, like your photo, bio, location, links and availability for work.
• Work and activity: your posts, images, videos, comments, likes, saves, follows, teams and the reports you send.
• Invitations and waitlist: the email you give us to join, or that a member gives us to invite you.
• Billing: your plan and payment status. Payments are handled by Stripe. We never see or store your card number.
• Technical data: IP address, browser and device type, used to keep you signed in, prevent abuse and keep Roughs secure.
• Usage counts, like views of your work, to show creators their stats.

How we use it

• To run Roughs: your account, profile, feeds, search and notifications.
• To send emails you need: verification codes, password resets, security alerts, notifications and moderation notices.
• To process subscriptions.
• To keep Roughs safe: detect spam, bots and abuse, review reports and enforce our Terms.
• To meet legal duties, like tax and accounting.
• To fix problems and improve Roughs.

We don't sell your personal information, and we don't use it for advertising.

What others can see

Your profile, published work, comments and who you follow are public, including to people who aren't signed in. Your email, password, billing details and the reports you send stay private.

Who helps us run Roughs

We use trusted providers that process information on our behalf, only to run Roughs:

• Cloudflare: hosting, image and video storage, and security.
• Neon: database.
• Stripe: payments.
• Resend: emails.
• Sentry: error reports, so we can fix bugs.

These providers may store information outside Quebec, including in the United States. We choose providers that protect it with appropriate safeguards.

We may also share information when the law requires it, to protect people or Roughs, or if Roughs is sold or reorganized.

Cookies

We only use necessary cookies: one to keep you signed in and one to remember your language. Cloudflare Turnstile checks for bots on some forms. Your theme choice is saved in your browser. We use no advertising or tracking cookies.

If we ever add optional analytics, it will stay off until you choose to allow it, and this policy will say so first.

How long we keep it

We keep your information while your account exists. If you deactivate your account, your profile and work are hidden. If you ask us to delete your account, we delete your personal information, except what we must keep for legal, billing or security reasons.

Deleted information may remain in backups for a short time. Content removed by moderation may be kept hidden for a limited time to handle appeals.

Your rights

You can ask to access, correct or delete your personal information, or withdraw your consent, by writing to hi@roughs.design. We may need to confirm your identity first. You can also edit most of your information yourself in Settings and on your profile. We answer within 30 days.

If you're not satisfied with our answer, you can file a complaint with the Commission d'accès à l'information du Québec.

Age

Roughs is for people 18 and older, or younger with permission from a parent or guardian. If we learn we hold information about a child under 14 without a guardian's consent, we delete it.

Changes

If we change this policy in an important way, we'll tell members by email or on Roughs before it takes effect.