Privacy Policy

1. Your account

To create designs you need an account. You can sign up with an email and password, or with Google. We store your email address, a display name (from Google or the first part of your email), your plan, and your credit usage. Passwords are handled by our authentication service and are never visible to us in readable form.

2. Room photos and generated designs

• When you create a design, the photo you upload and your chosen room type, style and any custom instructions are sent from our server to an AI image service to produce the new image.
• The original photo and the generated design are stored in private storage under your account. They are shown to you through temporary links that expire after about one hour.
• Designs made before October 2026 may not have the original photo saved.
• Deleting a design removes both image files. A record that the design was made (date, style, room, credits used) is kept so credits cannot be reset by deleting designs.

3. Projects and share links

• Personal projects are private to you.
• Designs are private by default. If you create a share link, anyone with that link can view that one image. They cannot see your name, email, original photo or other designs.
• Revoking the link, or deleting the design, stops access through it.

4. Studio team workspaces

• A Studio owner can invite up to two people by email. We store the invited email address and a scrambled (hashed) copy of the invitation code. Invitations expire after 7 days.
• Members of a workspace can see each other's display names, roles and credit usage for the period, plus every design placed in the team's client projects.
• Designs you keep outside team projects remain private to you.
• If a member leaves or is removed, designs they made for the team remain with the team, because they used the team's shared credits.

5. AI processing and third parties

We use these service providers to run Roomly:

• Lovable Cloud for hosting, database, authentication and file storage.
• The Lovable AI Gateway, which sends design requests to an OpenAI image model.
• Google, only if you choose Google sign-in.
• When paid plans launch: a payment provider [Lemon Squeezy — to be confirmed], which will act as merchant of record and process your payment details directly. Roomly will never see or store your card number.

How long the AI providers keep request data, and whether they use it for training, is governed by their own terms [to be confirmed by legal review]. We do not sell your personal information and we do not use your photos for advertising.

6. Deleting your account

You can delete your account from the Dashboard. This permanently removes your profile, photos, designs, personal projects and share links. If you own a Studio workspace, the workspace, its invitations and its client projects are removed; members keep the designs they made, which return to their private designs. If you were a team member, designs you made with the team's credits are emptied (images and instructions removed) but a usage record stays so the team's credits are not refunded. A deleted account cannot be restored.

7. Free-trial protection code

To stop the 3 free designs from being claimed again by deleting and re-registering the same email, we keep two things after deletion:

• a one-way code created from your email address with a secret key. It cannot be turned back into your email.
• the number of free credits you had used (0–3).

Nothing else is kept: no name, photos or designs. Small variations of the same address, such as different capitals, "+tags", and dots in Gmail addresses, produce the same code.

If you sign up again with that email, your new account starts with those free credits already used. This record is deleted after two years; the cleanup runs whenever any account is deleted. Only our server can read it.

8. Security

Access to your data is restricted by database rules so that each user can only reach their own records and the team data they are allowed to see. No system is perfectly secure, and we make no certification claims.

9. Your rights and contact

You can view, download and delete your designs and delete your account at any time in the app. For other requests, contact roomly.ai.support@gmail.com. Which privacy laws apply (for example GDPR for EU users), and how long other logs are kept, are [to be confirmed by legal review].