Privacy Policy

1. Introduction

This Privacy Policy explains how Roomshoot, LLC (“RoomShoot,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the RoomShoot website at roomshoot.com and our related applications and services (the “Service”).

By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

2. A Note on the Photos You Upload

The Service works by sending a photo you upload to a third-party AI image-processing provider to produce AI-generated frames. This means your uploaded photo leaves our systems to be processed by that provider in order to deliver the Service. We describe this in detail in Sections 4 and 5.

Please do not upload photographs containing highly sensitive personal information, medical information, financial records, government-issued identification documents, or any content for which you do not have the necessary rights, permissions, or consents. While RoomShoot is designed for photographs of interior and architectural spaces, uploaded images may be processed by third-party service providers as described in this Policy.

3. Information We Collect

3.1 Information You Provide

• Account information: your email address and, if you sign in with Google, the basic profile information that sign-in provides (such as name and email). We do not receive your Google password.
• Uploaded photos (“User Content”): the images you upload of interior or architectural spaces. These photos may contain embedded metadata (such as EXIF data, which can include capture time and, in some cases, GPS location) and may incidentally contain people or other identifying details, depending on what you photograph.
• Communications: information you provide when you contact support.

3.2 Information Collected Automatically

• Usage and log data: actions taken in the app, request identifiers, timestamps, error logs, and similar diagnostic data.
• Device and connection data: IP address, browser type, device type, and similar technical information.
• Cookies and similar technologies: used for authentication, session management, security, analytics, and advertising measurement. See Section 9.

3.3 Payment Information

Payments are handled by Stripe. We do not collect or store your full payment card number.

Stripe processes your payment and provides us limited information such as a transaction confirmation, the last four digits and card type, and billing status. Stripe’s handling of your payment data is governed by Stripe’s privacy policy.

If you subscribe, Stripe also manages your plan, renewals and billing portal. We keep a Stripe customer reference, your plan, its status and billing dates, a record of each paid invoice, and copies of the payment notifications Stripe sends us, which can include your billing name, email and country.

4. How We Use Information

We use information to:

• create and manage your account and authenticate you;
• provide the core Service, including transmitting your uploaded photo to a third-party AI provider to generate your outputs and storing your generated rooms in your account;
• process purchases and subscriptions, manage your room balance, process refunds where applicable, and administer billing-related matters;
• send transactional and service messages (for example, password resets, payment notices and renewal reminders) via our email provider;
• maintain security, prevent fraud and abuse, enforce rate limits, and investigate violations of our Terms;
• diagnose problems, monitor performance, and improve the Service; and
• comply with legal obligations.

We do not use your uploaded photos or generated outputs to train our own or any third party’s AI models, and we do not sell your personal information.

5. AI Generation and the Metadata in Your Photos

When you start a shoot, your uploaded photo is sent to a third-party AI image-processing provider that generates the frames you receive. We use paid commercial API services under terms that prohibit the provider from using customer content, including uploaded images and generated outputs, to train or improve its generative AI models.

The provider may retain prompts, uploaded images, and generated outputs for a limited period to enforce its policies, detect abuse, and comply with legal obligations. For additional information, please refer to the provider’s applicable terms and policies.

Photos larger than about 800 KB are resized in your browser before upload, which removes embedded metadata such as capture time and GPS location. Smaller photos are uploaded unchanged, metadata included. We don’t separately extract, store or use that metadata.

We keep your original upload in private storage (see Section 7).

The frames we generate are new images and do not carry the EXIF or GPS location data from your original photo.

6. How We Share Information

We share information only as described here.

We engage trusted third-party service providers to perform services on our behalf. These providers are authorized to access personal information only as necessary to provide services to us and are contractually required to protect it and process it in accordance with applicable law and our instructions.

Service providers (subprocessors) who operate the Service on our behalf, in the following categories:

• Cloud hosting and database — stores your account, your rooms, and app data;
• AI image processing — generates your shoots from your uploaded photo (see Section 5);
• Payment processing — handles checkout, subscriptions and billing; we never receive or store your full card details;
• Transactional email — sends account, security, and support messages;
• Product analytics — helps us understand and improve how the app is used.

Advertising partner: we share limited information about your activity on our website with Meta Platforms, Inc. through the Meta Pixel, as described in Section 9.

We may name specific providers on request for business or compliance purposes.

Legal and safety: We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, regulation, legal process, court order, governmental request, or to protect the rights, property, or safety of RoomShoot, our users, or others.

Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information for money. We do share limited information about your visit with Meta for advertising, as described in Section 9. Some privacy laws call this “sharing” or “targeted advertising,” and you can opt out as described in Section 9.

7. Data Retention

We keep your original uploaded photos in private storage until you delete your account or ask us to delete them by emailing support@roomshoot.com. We may verify your identity first. Deleting a room deletes its generated images but not the original photo.

Generated rooms (your outputs) are retained in your account indefinitely so they remain available to you until you delete them or close your account.

Account and transaction records are retained while your account is active and as needed afterward to comply with legal, tax, and accounting obligations and to resolve disputes.

Logs and diagnostic data are retained for a limited period for security and operational purposes.

When you delete a room, we delete its generated images. When you delete your account, we delete your uploaded photos and generated images, except residual copies in routine backups and records we must keep by law.

8. How We Protect Information

We use technical and organizational safeguards including encrypted transport, private (non-public) storage buckets, row-level security so each account can access only its own data, signed time-limited URLs for file access, and access controls on administrative functions.

No system is perfectly secure. While we work to protect your information, we cannot guarantee absolute security, and you are responsible for safeguarding your login credentials.

9. Cookies

We use strictly necessary cookies for authentication, session management, and security, and a limited set of cookies for analytics and advertising measurement to understand and improve usage.

Where available, users may opt out of certain analytics features through account settings.

You can also control cookies through your browser settings. Disabling necessary cookies may prevent certain features of the Service from functioning properly.

9.1 Advertising

We use the Meta Pixel, a tool provided by Meta Platforms, Inc., to measure how well our ads perform and to show RoomShoot ads to people who may be interested. Through it, Meta may use cookies and similar technologies to collect or receive information from our website and elsewhere on the internet, such as the pages you view and actions you take (for example, creating an account or making a purchase), along with device and browser information, and use it to provide measurement services and target ads. Meta may use this information under its own Privacy Policy. We do not send your uploaded photos or generated images to Meta.

You can opt out at any time: in your RoomShoot account settings; by turning on Global Privacy Control in your browser, which we honor; in your Facebook or Instagram ad settings; or at aboutads.info/choices.

10. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• to access or obtain a copy of it;
• to correct inaccurate information;
• to delete it;
• to opt out of the sharing of personal information for targeted advertising (see Section 9 for how);
• to data portability; and
• to be free from discrimination for exercising these rights.

Florida residents may have rights under the Florida Digital Bill of Rights.

California residents may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

EU and UK residents, if applicable, may have rights under the GDPR and UK GDPR. Where those laws apply, our legal bases for processing personal information include:

• performance of our contract with you;
• your consent, where applicable;
• our legitimate interests in operating, securing, and improving the Service; and
• compliance with legal obligations.

To exercise any applicable privacy right, contact us at support@roomshoot.com.

We will verify your request, typically by confirming control of your account email address, and respond within the time required by applicable law.

You may also delete most of your content directly within the Service. To delete an original photo, email support@roomshoot.com.

11. International Users

The Service is operated from the United States.

If you access the Service from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States and in other countries where our service providers operate.

Those countries may have data-protection laws that differ from those in your jurisdiction.

12. Children’s Privacy

The Service is not intended for anyone under eighteen (18) years of age, and we do not knowingly collect personal information from children.

If we learn that we have collected personal information from a child, we will delete it.

If you believe a child has provided information to us, please contact support@roomshoot.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide notice through appropriate means, such as email or in-app notification, and we will update the “Last Updated” date at the top of this Policy.

Your continued use of the Service after any updated Privacy Policy becomes effective constitutes acceptance of the revised Policy.

14. Contact

Roomshoot, LLC
Email: support@roomshoot.com