Privacy Policy

This Privacy Policy explains how Roomora ("we", "us") collects, uses, and protects your personal data when you use room-ora.com (the "Service"). We are based in France and aim to comply with the EU General Data Protection Regulation (GDPR). For the purposes of the GDPR, Roomora is the data controller; you can reach us at privacy@room-ora.com.

1. What we collect

• Account data: your email address, your name (if you provide it), and your sign-in method (email/password or Google).
• Room photos you upload and the designs generated for you.
• Payment data: when you buy credits, our processor Stripe handles your card details. We receive confirmation of the transaction but do not store your full card number.
• Usage and device data: basic technical information needed to run the Service (for example, requests, errors, and the language you choose).

2. How we use your data

• To provide the core feature: processing your photo to generate restyled images.
• To manage your account, credit balance, and saved designs.
• To process payments and prevent abuse or fraud.
• To operate, secure, and improve the Service, and to respond to your requests.

3. Who we share data with (processors)

We do not sell your personal data. To run the Service, we share data with trusted providers who process it on our behalf. Importantly, the room photos you upload are sent to third-party AI providers to generate your restyled image:

• Supabase — authentication, database, and storage of your account, photos, and designs.
• fal.ai — runs the image-generation models that create your restyled room.
• Google — provides one of the image models used to generate designs.
• MiniMax— used to describe the style of an inspiration photo in "match a photo" mode.
• Stripe — payment processing.
• Vercel — hosting of the website and app.

4. International transfers

Some of these providers process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards (such as the providers' Standard Contractual Clauses) to protect your data.

5. Legal basis

We process your data to perform our contract with you (providing the Service), based on your consent where required (for example, uploading a photo to be processed), and on our legitimate interests in operating, securing, and improving the Service.

6. How long we keep it

We keep your account data while your account is active. You can delete saved designs at any time from within the app, and you can ask us to delete your account and associated data. Some records may be retained where required by law (for example, payment records).

7. Your rights

Under the GDPR you have the right to access, correct, delete, or export your data; to object to or restrict certain processing; and to withdraw consent at any time. To exercise these rights, contact privacy@room-ora.com. You also have the right to lodge a complaint with your local data-protection authority (in France, the CNIL).

8. Cookies

We use essential cookies needed to keep you signed in and to run the Service. We do not use third-party advertising or cross-site tracking cookies.

9. Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

10. Security

We use reasonable technical and organizational measures to protect your data. No method of transmission or storage is completely secure, but we work to safeguard your information.

11. Changes

We may update this policy as the Service evolves. We will update the date above and, for material changes, take reasonable steps to notify you.

12. Contact

For any privacy question or request, contact privacy@room-ora.com.