Privacy Policy
Last updated: October 21, 2026 · Version 1.0
This Privacy Policy explains how Room Design AI ("we", "us", "our"), operated by an individual sole proprietor, collects, uses, stores, and shares personal information when you use the Room Design AI service at https://room-design-ai.com (the "Service"), and the rights available to you. Please read it together with our Terms of Service.
1. Who is responsible for your data
Room Design AI is the data controller for personal data processed through the Service. Privacy contact: yyzq99@gmail.com. We have not appointed a Data Protection Officer because this is not required for an operation of our size.
2. Personal information we collect
2.1 Information you provide
- Account information: your email address and, if you provide them, your name and profile image. If you sign in with a third-party account offered on the sign-in page, we receive the basic profile information that provider shares (such as name and email). Passwords are handled by our authentication provider, Clerk, and are never visible to us.
- Photos you upload: room photos you upload to your workspace. We remove embedded metadata (such as camera details and GPS location) when processing uploads.
- Generated designs: the AI-generated images created from your photos, and the room type and style you selected.
- Purchase information: when you buy credits, we receive from our payment processor the order ID, pack purchased, amount, currency, and payment and refund status. We never receive or store your full card number.
- Communications: emails you send us, such as support, refund, or deletion requests and content reports.
2.2 Information collected automatically
- Usage and account records: your credit balance, credit reservations and charges, generation history and status, and timestamps.
- Technical and log data: IP address, browser and device type, request timestamps, and error logs, processed by our hosting provider to deliver, secure, and troubleshoot the Service.
We do not use advertising trackers or third-party analytics, and we do not collect precise location data.
3. How we use your information
| Purpose | Legal basis |
|---|---|
| Creating and securing your account, signing you in | Performance of our contract with you |
| Storing your photos and generating, storing, and delivering room designs | Performance of contract |
| Managing credits, processing purchases and refunds | Performance of contract; legal obligation (tax and accounting records) |
| Customer support and responding to requests | Performance of contract; legitimate interests |
| Service notices (billing, security, changes to our terms) | Legitimate interests |
| Preventing fraud and abuse, enforcing our Acceptable Use Policy | Legitimate interests; legal obligation |
| Troubleshooting and improving reliability of the Service | Legitimate interests |
We do not use your photos or generated designs to train AI models, we do not publish them, and we do not send marketing emails. If we ever want to send marketing, we will ask for your consent first and every message will include an unsubscribe link.
6. Data security
- All traffic is encrypted in transit with HTTPS/TLS.
- Photos and designs are stored in private storage. Every preview and download is checked against your account and served through short-lived links.
- Passwords are managed by Clerk and never stored by us; access to production systems and credentials is restricted to the operator.
No system is perfectly secure. If a security incident affects your personal data, we will notify you and the relevant authorities without undue delay and, where required by law, within 72 hours of becoming aware of it.
7. Data retention & deletion
| Data | How long we keep it |
|---|---|
| Uploaded photos and generated designs | Until you delete them. Deleting a photo in your workspace permanently removes the photo and all designs generated from it from our storage. All remaining files are deleted within 30 days of account deletion. |
| Account information | While your account is open; deleted within 30 days of an account deletion request. |
| Purchase, credit, and refund records | As long as required for tax, accounting, and dispute purposes (typically up to 7 years), then deleted or anonymized. |
| Support and report emails | Up to 2 years after the matter is closed. |
| Technical and security logs | Short-lived; typically deleted automatically by our hosting provider within 30 days. |
How to delete your data: you can delete any photo and its designs yourself at any time from your workspace. To delete your entire account and associated data, email yyzq99@gmail.com from the email address on your account with the subject "Delete my account". We complete deletion requests within 30 days and confirm by email.
Images sent to our AI provider are used only to produce your design. The provider's copy of the result is not used by us after we have saved it to your workspace.
8. Your data rights
Depending on where you live (for example under the GDPR, UK GDPR, or CCPA), you have the rights below. To exercise any of them, email yyzq99@gmail.com. We respond within 30 days and may need to verify your identity first. We will not discriminate against you for exercising your rights.
| Right | What it means |
|---|---|
| Information | Know what data we collect and how we use it (this policy) |
| Access | Get a copy of the personal data we hold about you |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Ask us to delete your data (see Section 7) |
| Restriction | Ask us to limit processing in certain cases |
| Portability | Receive your data in a machine-readable format; you can also download your photos and designs at any time |
| Objection | Object to processing based on our legitimate interests |
| Withdraw consent | Withdraw any consent you have given, at any time |
You may also lodge a complaint with your local data protection authority.
9. International data transfers
Our service providers operate in multiple countries. Our database is hosted in the United States, and Cloudflare serves the website from a global network. Where personal data is transferred outside your country, we rely on our providers' data processing agreements, including the EU Standard Contractual Clauses where applicable, to protect it.
10. Children's privacy
The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact yyzq99@gmail.com and we will delete it promptly.
11. Third-party services
When you check out, you are taken to Waffo Pancake's checkout page, and sign-in screens are provided by Clerk. Their handling of the data you enter there is also governed by their own privacy policies. This policy applies only to data we control.
12. Changes to this policy
We will update the "Last updated" date above whenever we change this policy. For material changes, we will notify registered users by email at least 15 days before they take effect.
13. Contact us
- Privacy and support email: yyzq99@gmail.com
- Website: https://room-design-ai.com