Privacy Policy

1. Controller

Alber Levi, Konak Izmir Turkiye, Türkiye is responsible for the processing of your personal data in connection with Roomora Studio. Contact: support@roomora.studio.

2. Data we process

Account data: e-mail address, name and profile picture if you sign in with Google, and a user ID.

Content: the photos you upload, the requests you write, and the generated results.

Billing data: plan, credit balance and transaction references. Payments are processed by Paddle, which receives your payment details directly; we never see your card number.

Technical data: log data such as IP address, browser type and error reports, used for security and to keep the service running.

3. Why we process it

To provide the service and your account (performance of a contract); to keep the service secure, prevent abuse such as multiple free accounts, and improve reliability (legitimate interests); and to meet accounting and tax obligations (legal obligation).

We do not sell your data and we do not use your photos or results to train AI models.

4. Service providers

Hetzner Online GmbH, Germany (the server that runs the service, including the database and your photos); Google Firebase Authentication (sign-in); fal.ai (AI image generation); Google Gemini API (translating your written requests, only when this feature is enabled); Paddle (payments, as merchant of record). These providers process data on our behalf or as independent controllers for their own legal obligations (Paddle). Some of them are located outside your country, including in the United States; where required, transfers are protected by standard contractual clauses.

5. How long we keep data

Account data and content are kept while your account is active. You can ask us at any time to delete photos, results or your whole account. Billing records are kept for as long as tax law requires. Technical logs are deleted after 30 days.

6. Your rights

Depending on where you live (for example under the GDPR or Turkey’s KVKK) you have the right to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. Write to support@roomora.studio. You can also complain to your data protection authority.

7. Cookies and local storage

We only use what is needed to run the service: staying signed in and remembering your language. Paddle’s checkout may set cookies needed for payment and fraud prevention. We do not use advertising cookies.

8. Security

All connections to the service are encrypted (HTTPS). The service runs on a server in Germany (EU) behind a firewall; administrator access requires a personal key, and access to data is limited to what is needed to operate the service.

9. Changes

We will update this policy when our processing changes and show the date of the last update above.