Privacy Policy

Roomellow ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, display name (if provided), password (encrypted)
• Uploaded Images: Room photos you upload for design generation
• Payment Information: Processed by Stripe (we do NOT store credit card details)

1.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, IP address (hashed for privacy)
• Generated Designs: AI-generated room designs created from your uploads

1.3 Cookies and Similar Technologies

We use essential cookies for authentication and session management. These are required for the Service to work and cannot be turned off.

We also use analytics and advertising cookies and similar technologies to understand how the Service is used and to measure the performance of our advertising:

• Google Analytics and Microsoft Clarity — aggregate usage analytics (which pages are visited, where people drop off)
• Meta Pixel — measures which visits and purchases resulted from our ads on Facebook and Instagram, and may be used by Meta to show you Roomellow ads

Visitors in the EU, EEA, and UK are asked for consent before any analytics or advertising technology loads, and none of it loads if you decline. These technologies never receive your email address, name, uploaded room photos, or the contents of your designs. See Section 4 for the third-party services involved.

2. How We Use Your Information

We use your information to:

• Provide the Service: Generate AI room designs from your uploaded images
• Store Your Designs: Save your generated designs to your account for future access
• Process Payments: Handle credit pack and subscription purchases via Stripe
• Improve the Service: Analyze usage patterns to fix bugs and add features (anonymized data only)
• Communicate: Send account-related emails (password resets, billing receipts, service updates)

3. How We Store Your Data

• Secure Cloud Infrastructure: Your images and designs are stored on secure cloud servers with encryption
• Account Data: Email, preferences, and usage history are stored in a secure database
• Retention Period: We retain your data while your account is active. After account deletion, data is permanently removed within 30 days.

4. Third-Party Services

We use the following third-party services that may process your data:

Note: Third-party services have their own privacy policies. We encourage you to review them.

5. Data Sharing and Disclosure

We do NOT sell, rent, or trade your personal information. We may share data only in these limited circumstances:

• With Your Consent: If you choose to share a design publicly (e.g., via share link)
• Legal Requirements: If required by law, court order, or government request
• Service Providers: Third-party services (Stripe, cloud hosting) that help us operate the Service
• Analytics and Advertising Partners: Meta, Google, and Microsoft receive activity data from our website and app as described in Sections 1.3 and 4, so we can measure usage and advertising performance. This never includes your email address, name, uploaded room photos, or design contents.
• Business Transfer: If Roomellow is acquired or merged, your data may transfer to the new owner

6. Partner Store Experiences

Roomellow partners with furniture retailers to offer branded design experiences (e.g., roomellow.com/store/[name]).

When you use a partner store page:

• Your designs feature products exclusively from that retailer's catalog
• Partner stores do not have access to your Roomellow account, email, uploaded images, or saved designs

All Roomellow privacy protections apply equally on partner store pages.

7. Roomellow for Shopify Merchants

Roomellow offers a Shopify app that lets furniture retailers add the "Visualize in Your Room" experience to their storefront. This section describes the data we collect from merchants who install the app and from their customers' checkout flow.

7.1 Information We Collect from Merchants

• Shop Information: Shopify shop domain (e.g., example.myshopify.com), shop name, and the offline access token Shopify issues so we can sync your product catalog.
• Product Catalog: Product titles, prices, images, variants, and tags — the data needed to render your products inside the "Visualize in Your Room" experience.
• Onboarding State: Sync status, product count, and timestamps so the merchant dashboard can show progress.

7.2 Information We Collect from Customer Orders

When a customer completes a purchase containing a line item the customer added via Roomellow's "Visualize" flow, Shopify delivers an orders/paid webhook to us containing the order's line items. We record:

• The Shopify shop identifier, order ID, and order name (e.g., #1004)
• The line item ID, variant ID, product handle, and product title
• The quantity and unit price (in cents) of each Roomellow-attributed line
• The Roomellow design identifier and attribution source (line item properties named _roomellow_* that we attach when the customer clicks "Buy" from the visualizer)
• The timestamps for when Shopify marked the order paid and when we recorded the attribution

7.3 How We Use Merchant Data

• Product Visualization: Render the merchant's catalog in customer-facing room designs.
• Attribution Dashboard: Show the merchant a count and dollar total of orders that included items added via Roomellow.
• Operational Health: Detect failed catalog syncs and surface re-sync prompts in the merchant admin.

7.4 Data Retention & Automatic Deletion on Uninstall

When a merchant uninstalls the Roomellow Shopify app, Shopify sends us an app/uninstalled webhook. We respond by automatically deleting:

• All attributed-sale records we hold for that shop
• The merchant's shop configuration and onboarding state
• All authentication tokens and sessions for that shop

Deletion typically completes within minutes. Shopify also sends a shop/redact webhook 48 hours after uninstall as a GDPR compliance mandate — we run the same cleanup again as a belt-and-suspenders safeguard.

We additionally honor Shopify's customers/redact and customers/data_request webhooks. Because we do not store any customer PII (see 7.2 above), these requests are acknowledged without any data deletion being necessary.

7.5 Shopify-Specific Sub-processors

In addition to the third-party services listed in Section 4, the Shopify integration uses:

7.6 Merchant Data Requests

Merchants can request a copy of all data we hold for their shop, or request immediate deletion (without uninstalling the app), by emailing support@roomellow.com with the subject line "Shopify Merchant Data Request" from the email address registered on their Shopify Partner account. We will respond within 30 days.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

8.1 Access and Portability

You can access your account data, uploaded images, and generated designs anytime by logging into your account.

8.2 Correction

You can update your email address and display name from your account settings.

8.3 Deletion

You can delete your account at any time. This will permanently remove:

• Your uploaded images
• Your generated designs
• Your account information (email, preferences)
• Your usage history

Deletion is processed within 30 days. Some data may be retained for legal or billing purposes (e.g., payment receipts for tax compliance).

8.4 Data Export

To request a copy of your data, email us at support@roomellow.com with the subject line "Data Export Request". We will provide your data in a machine-readable format within 30 days.

8.5 Opt-Out of Marketing

You can unsubscribe from marketing emails by clicking the "Unsubscribe" link in any email. You will still receive essential account-related emails (e.g., password resets, billing receipts).

9. Children's Privacy

Roomellow is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@roomellow.com.

10. International Users

Roomellow is based in the United States. If you access the Service from outside the U.S., your data may be transferred to and stored on servers in the U.S.

European Users (GDPR): We comply with GDPR requirements, including your rights to access, correct, and delete your data. To exercise these rights, contact us at support@roomellow.com.

California Users (CCPA/CPRA): California residents have the right to: (1) know what personal information we collect; (2) request deletion of personal information; (3) opt out of the sale or sharing of personal information; and (4) non-discrimination for exercising these rights. We do not sell your personal information for money. However, our use of advertising technologies described in Sections 1.3 and 4 (in particular the Meta Pixel) may qualify as "sharing" for cross-context behavioral advertising under California law. We honor Global Privacy Control: if your browser or extension sends a GPC signal, our advertising pixel does not load at all. You can also opt out by emailing support@roomellow.com with the subject "Do Not Sell or Share", or by blocking cookies for roomellow.com in your browser settings.

11. Data Security

We take security seriously and use industry-standard measures to protect your data:

• Encryption: Data is encrypted in transit (HTTPS) and at rest
• Access Controls: Strict access controls limit who can view your data
• Secure Storage: Images and designs stored on secure cloud infrastructure
• IP Hashing: IP addresses are hashed for privacy (rate limiting purposes)

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Data Breach Notification: In the event of a data breach affecting your personal information, we will notify you via email within 72 hours of discovery, as required by applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or prominent notice on the Service. Continued use after changes constitutes acceptance of the updated Privacy Policy.

13. Governing Law

This Privacy Policy is governed by the laws of the State of Texas, United States.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at: