Privacy Policy
How RoomRedecor handles your photos, masks, guest trial, account, and payment data.
Last updated: 2026-09-25
RoomRedecor (“we”, “us”) explains here what the current service collects, why it is needed, and what happens to it. This page describes the behavior we have implemented; it does not promise that a third-party processor keeps data for the same period.
What we collect and how long we keep it
| Data | Why we need it | Retention and access |
| -------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Photos, masks, and generated images | Run the room redesign and show you the result | Assets are owner-scoped and their access expires after the configured 24-hour lifetime. After expiry, asset reads are blocked. Cleanup is requested through the service reconciliation path; storage cleanup and database metadata cleanup may complete separately. |
| Anonymous guest cookie and guest records | Give an anonymous visitor one trial generation, enforce the guest gate, and connect the request to its assets and task | The signed, HttpOnly guest cookie is valid for up to 1 year. A guest also has an internal user row, credit ledger entry, and room task records. Clearing browser state can affect guest recognition, so the cookie is not presented as a complete abuse-prevention guarantee. |
| Account info (email, display name, sign-in identity) | Sign in and connect an account to its credits, orders, and tasks | Kept while needed to operate the account and service, subject to applicable operational and legal requirements. |
| Room choices, masks, and task events | Validate requests, run safety checks, reconcile generations, and protect the service | Kept for the operational period needed for those purposes; expired asset access does not make related task or ledger records disappear immediately. |
| Payment, order, and credit records | Process credit purchases, support requests, and refunds | Kept for order support, refund reconciliation, and applicable accounting requirements. Full card details are processed by Stripe, not stored by RoomRedecor. |
| Feedback and contact emails | Answer you and improve the beta | Kept while needed to handle the request and related follow-up. |
| Anonymous analytics | Understand whether the public site works | Collected only through the analytics configuration that is enabled for the site and handled according to that provider’s terms. |
Photos, masks, and generated images are private to the owner account or anonymous guest identity while they are usable. You can request deletion from the workbench. A successful deletion blocks access and starts the asset cleanup path; the service does not promise that every storage copy or metadata row disappears at the exact same moment.
Anonymous trial and accounts
The public workbench can create an anonymous guest identity. The current guest path allows one trial generation per browser/guest identity, subject to Turnstile verification, the site-wide budget, rate limits, and any operator stop switch. These controls are not a promise that clearing cookies or changing browser state can never create another guest attempt.
Sign in to purchase and use credit packs without an invitation. Signing in alone does not grant additional free generations. Available credits, safety checks, and service limits still apply.
Room types and generated content
The workbench currently lets a user choose living room, bedroom, kitchen, or bathroom. The kitchen and bathroom paths are experimental and intended for inspiration only. None of the room types promises exact geometry, measurements, unchanged doors or windows, construction suitability, or a result fit for purchasing or building decisions.
Who else may process your data
The service uses configured processors for specific jobs:
- Replicate, or another configured image provider, may process a photo and mask to generate a result. Its own data-use and retention terms apply; we do not claim that a provider never retains or trains on submitted data.
- SeeAPI, or another configured safety provider, may screen uploaded or generated images for prohibited content.
- A configured payment provider such as Stripe may process a payment when checkout is enabled. We do not receive the full card number through the workbench.
- Cloudflare provides hosting and, when enabled, private object storage or analytics services. Cloudflare Turnstile checks anonymous requests to help prevent automated abuse; its Turnstile Privacy Addendum applies to that processing.
- Google may provide OAuth sign-in if that method is enabled and you choose it.
We do not sell personal data. There is no public gallery of private uploads or generated results. Public pages use separately sourced photos and demonstration results, with current and historical examples identified.
Payments
Stripe processes credit-pack payments. RoomRedecor stores order references, purchased credits, payment status, and refund status to deliver and support your purchase. See Payments and refunds for the request process.
Workbench drafts and product analytics
The workbench can save one draft photo, its selection, and task reference in this browser for up to 24 hours so you can return after signing in or paying. Other devices do not receive this draft. Use the workbench's Clear draft action to remove it; browser storage controls can also remove it. Expired drafts are removed when the workbench next opens.
We record limited product events such as opening the tool, selecting a photo, completing a selection, viewing prices, and starting checkout. Context is limited to allowlisted page paths, a random session identifier, mobile or desktop category, sample or upload choice, and selected credit pack. We do not include photos, full URLs, query strings, or payment details in this event context. Events may be linked to your account or guest identity to connect usage with service outcomes. Session attribution lasts for this browser session; it is not cross-device tracking.
Your questions and requests
- Use My photos & privacy → Delete my room images to remove stored room images for your current account or guest identity. This also clears the browser draft.
- Ask about access, correction, deletion, or privacy by emailing hello@roomredecor.com. Include the sign-in email or guest context that helps us locate the request, but do not send a password or payment-card number.
- We may need to verify the requester before changing account or private asset data.
Service operator
The service is operated by RoomRedecor. Privacy contact: hello@roomredecor.com.