Privacy Policy

1. Introduction

This Privacy Policy explains how Roomshoot, LLC (“RoomShoot,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the RoomShoot website at roomshoot.com and our related applications and services (the “Service”).

By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

2. A Note on the Photos You Upload

The Service works by sending a photo you upload to a third-party AI image-processing provider to produce AI-generated frames. This means your uploaded photo leaves our systems to be processed by that provider in order to deliver the Service. We describe this in detail in Sections 4 and 5.

Please do not upload photographs containing highly sensitive personal information, medical information, financial records, government-issued identification documents, or any content for which you do not have the necessary rights, permissions, or consents. While RoomShoot is designed for photographs of interior and architectural spaces, uploaded images may be processed by third-party service providers as described in this Policy.

3. Information We Collect

3.1 Information You Provide

• Account information: your email address and, if you sign in with Google, the basic profile information that sign-in provides (such as name and email). We do not receive your Google password.
• Uploaded photos (“User Content”): the images you upload of interior or architectural spaces. These photos may contain embedded metadata (such as EXIF data, which can include capture time and, in some cases, GPS location) and may incidentally contain people or other identifying details, depending on what you photograph.
• Communications: information you provide when you contact support.

3.2 Information Collected Automatically

• Usage and log data: actions taken in the app, request identifiers, timestamps, error logs, and similar diagnostic data.
• Device and connection data: IP address, browser type, device type, and similar technical information.
• Cookies and similar technologies: used for authentication, session management, security, and basic analytics. See Section 9.

3.3 Payment Information

Payments are handled by Stripe. We do not collect or store your full payment card number.

Stripe processes your payment and provides us limited information such as a transaction confirmation, the last four digits and card type, and billing status. Stripe’s handling of your payment data is governed by Stripe’s privacy policy.

4. How We Use Information

We use information to:

• create and manage your account and authenticate you;
• provide the core Service, including transmitting your uploaded photo to a third-party AI provider to generate your outputs and storing your generated rooms in your account;
• process purchases, manage credits, process refunds where applicable, and administer billing-related matters;
• send transactional and service messages (for example, password resets and payment notices) via our email provider;
• maintain security, prevent fraud and abuse, enforce rate limits, and investigate violations of our Terms;
• diagnose problems, monitor performance, and improve the Service; and
• comply with legal obligations.

We do not use your uploaded photos or generated outputs to train our own or any third party’s AI models, and we do not sell your personal information.

5. AI Generation and the Metadata in Your Photos

When you start a shoot, your uploaded photo is sent to a third-party AI image-processing provider that generates the frames you receive. We use paid commercial API services under terms that prohibit the provider from using customer content, including uploaded images and generated outputs, to train or improve its generative AI models.

The provider may retain prompts, uploaded images, and generated outputs for a limited period to enforce its policies, detect abuse, and comply with legal obligations. For additional information, please refer to the provider’s applicable terms and policies.

Your uploaded photo is sent as-is, including any embedded metadata it carries. We do not separately extract, store, or use the EXIF or GPS location data in your uploads.

Your original upload is automatically deleted from our storage approximately 24 hours after upload (see Section 7).

The frames we generate are new images and do not carry the EXIF or GPS location data from your original photo.

6. How We Share Information

We share information only as described here.

We engage trusted third-party service providers to perform services on our behalf. These providers are authorized to access personal information only as necessary to provide services to us and are contractually required to protect it and process it in accordance with applicable law and our instructions.

Service providers (subprocessors) who operate the Service on our behalf, in the following categories:

• Cloud hosting and database — stores your account, your rooms, and app data;
• AI image processing — generates your shoots from your uploaded photo (see Section 5);
• Payment processing — handles checkout and billing; we never receive or store your full card details;
• Transactional email — sends account, security, and support messages;
• Product analytics — helps us understand and improve how the app is used.

We may name specific providers on request for business or compliance purposes.

Legal and safety: We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, regulation, legal process, court order, governmental request, or to protect the rights, property, or safety of RoomShoot, our users, or others.

Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information and do not share it for cross-context behavioral advertising.

7. Data Retention

Raw uploaded photos are temporary. They are automatically deleted from our storage on a short cycle (approximately 24 hours after upload) once they are no longer needed to generate your outputs.

This window is also why re-shoots are available for about 24 hours: a re-shoot regenerates from your original photo, and once that photo is deleted it is no longer available to re-shoot from.

Generated rooms (your outputs) are retained in your account indefinitely so they remain available to you until you delete them or close your account.

Account and transaction records are retained while your account is active and as needed afterward to comply with legal, tax, and accounting obligations and to resolve disputes.

Logs and diagnostic data are retained for a limited period for security and operational purposes.

When you delete a room or close your account, we delete or de-identify the associated content within a reasonable period, except for residual copies in routine backups and records we must retain by law.

8. How We Protect Information

We use technical and organizational safeguards including encrypted transport, private (non-public) storage buckets, row-level security so each account can access only its own data, signed time-limited URLs for file access, and access controls on administrative functions.

No system is perfectly secure. While we work to protect your information, we cannot guarantee absolute security, and you are responsible for safeguarding your login credentials.

9. Cookies

We use strictly necessary cookies for authentication, session management, and security, and a limited set of cookies for basic analytics to understand and improve usage.

Where available, users may opt out of certain analytics features through account settings.

You can also control cookies through your browser settings. Disabling necessary cookies may prevent certain features of the Service from functioning properly.

10. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• to access or obtain a copy of it;
• to correct inaccurate information;
• to delete it;
• to opt out of sale or sharing for targeted advertising (note: we do not sell or share personal information for targeted advertising);
• to data portability; and
• to be free from discrimination for exercising these rights.

Florida residents may have rights under the Florida Digital Bill of Rights.

California residents may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

EU and UK residents, if applicable, may have rights under the GDPR and UK GDPR. Where those laws apply, our legal bases for processing personal information include:

• performance of our contract with you;
• your consent, where applicable;
• our legitimate interests in operating, securing, and improving the Service; and
• compliance with legal obligations.

To exercise any applicable privacy right, contact us at support@roomshoot.com.

We will verify your request, typically by confirming control of your account email address, and respond within the time required by applicable law.

You may also delete most of your content directly within the Service.

11. International Users

The Service is operated from the United States.

If you access the Service from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States and in other countries where our service providers operate.

Those countries may have data-protection laws that differ from those in your jurisdiction.

12. Children’s Privacy

The Service is not intended for anyone under eighteen (18) years of age, and we do not knowingly collect personal information from children.

If we learn that we have collected personal information from a child, we will delete it.

If you believe a child has provided information to us, please contact support@roomshoot.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will provide notice through appropriate means, such as email or in-app notification, and we will update the “Last Updated” date at the top of this Policy.

Your continued use of the Service after any updated Privacy Policy becomes effective constitutes acceptance of the revised Policy.

14. Contact

Roomshoot, LLC
Email: support@roomshoot.com