Privacy Policy

This Privacy Policy explains how RoomMaker AI (“RoomMaker AI”, “we”, “us”) collects and uses personal data when you use roommakerai.org (the “Service”).

Who is responsible

RoomMaker AI is operated by Chen Zhe, an individual based in the People’s Republic of China, who is the controller of your personal data. Privacy questions and requests: support@roommakerai.org.

What we collect

• Account data — your name, email address and profile picture. If you sign up with email, we store your password only as a secure hash. If you sign in with Google or GitHub, we receive your name, email address and profile picture from them; we never receive your Google or GitHub password.
• What you upload and create — the photos, sketches and floor plans you upload, the text instructions and design options you choose, and the images generated for you.
• RoomMaker Agent conversations — the messages you send to the RoomMaker Agent assistant and its replies.
• Purchases — your plan, credit balance and history, the products you bought and order references. Payments are processed by Waffo (see below); we never see or store your full card details.
• Support messages — what you send us by email or in support tickets.
• Safety records — prompts, photos or images that our safety checks block, and the safety model’s verdict.
• Technical data — IP address, browser type and request logs, used for security, abuse prevention and keeping the Service running.

Why we use it

• To provide the Service: generate, store and show your designs, run the RoomMaker Agent, and keep your credits and purchases in order (performance of our contract with you).
• To keep the Service safe and lawful: check content, prevent abuse and fraud, and meet legal obligations (legitimate interests and legal obligation).
• To support you and tell you about important changes to the Service or your account (legitimate interests).

We don’t sell your personal data, we don’t use it for advertising, and we don’t use your photos, instructions or generated images to train AI models.

Who processes it

We share data only with service providers that help us run RoomMaker AI, under terms that limit their use of it:

• Cloudflare — hosting, database and private file storage.
• Google and GitHub — sign-in, if you choose them. Google also provides the Gemini Flash model that safety-checks prompts, photos and generated images.
• AI model providers — your instructions and the photo being edited are sent to OpenAI (GPT Image 2) to generate your images and to Google (Gemini Flash) for safety checks, and your RoomMaker Agent messages are sent to DeepSeek (DeepSeek V4 Flash) so the assistant can understand your request. These requests pass through the API service providers we use to connect to the models.
• Waffo Pancake — our payment processor and Merchant of Record, which processes payments, handles tax and issues receipts. Waffo receives your email address and payment details directly and acts as an independent controller for that data under its own privacy policy. Card data is processed by Waffo Pancake and never stored on our servers.

We may also disclose data if the law requires it, to protect people’s safety (for example, reporting child sexual abuse material to the authorities), or as part of a sale or reorganization of the business.

Cookies and analytics

We use only essential cookies and similar storage: cookies that keep you signed in and protect sign-in requests, one that remembers your language, and browser storage for interface preferences such as the color theme. We don’t use advertising or cross-site tracking cookies.

To understand which pages are useful, we count visits with Plausible Analytics, a privacy-friendly tool that we host on our own server. It sets no cookies, collects no personal data and doesn’t track you across sites. It records the page visited, the referring site, and your browser, device type and country. Your IP address is only used to derive the country and an anonymous identifier that changes every day; the IP address itself is never stored. These statistics are aggregated, and we don’t share them with advertisers.

Emails

We email you only to answer your messages or about your account, purchases or changes to our policies; receipts come from Waffo. We don’t send marketing emails; if we ever do, they will need your consent and include an unsubscribe link.

How long we keep it

• Uploaded photos and generated images — kept privately in your account until you ask us to delete them or delete your account.
• RoomMaker Agent conversations — kept with your account. Deleting a conversation hides it from your account; it is erased when your account is deleted.
• Account data — until you delete your account, then removed within 90 days.
• Support messages — up to 2 years after the conversation ends.
• Safety records — at least 12 months, and longer where a serious violation must be kept for legal reasons.
• Purchase records — as long as tax and accounting laws require.

To have specific images deleted, or your whole account, email support@roommakerai.org from your account email.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California law), you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent where we rely on it. Email support@roommakerai.org from your account email and we’ll respond within 30 days. You can also complain to your local data protection authority.

International transfers

Our providers may process data outside your country, including in the United States. Where required, transfers are protected by safeguards such as the European Commission’s Standard Contractual Clauses.

Security

Data is encrypted in transit, passwords are stored only as hashes, your uploads and generated images are stored privately and served only to your account, and access is limited to what is needed to run the Service. No system is perfectly secure: if a breach affects your personal data, we will notify you and, where required, the relevant authority within 72 hours of becoming aware of it. Please contact us at once if you suspect a problem with your account.

Third-party links and content

Our pages may link to or load content from other websites, such as Waffo’s checkout or a badge image in our footer. Their privacy practices are governed by their own policies.

Children

You must be 18 or older to create an account. We don’t knowingly collect personal data from children; if you believe a child has given us personal data, contact us and we’ll delete it.

Changes

We’ll post any update here with a new date and announce material changes on the site at least 15 days before they take effect.

Contact

Privacy questions and requests, support and feedback: support@roommakerai.org.