Legal
Privacy Policy
Plain language, because a policy nobody reads protects nobody.
ROOMFLOAT / INFORMATION
What We Store
- Uploaded photos are stored privately for seven days to support rendering and result comparison, then scheduled for deletion.
- Generated images are stored privately for seven days. After you sign in, your credits and recent designs are linked to your account and can be accessed on another device.
- Free previews use a signed random visitor cookie. Google sign-in stores your name, email, provider identity and a session record. We use these to manage account access and purchases; we do not receive your Google password.
- Payment records include the amount, currency, payment provider reference, status and purchased credits. We do not store card numbers or their last four digits; card details are handled by the payment provider.
- Operational records include uploads, generation jobs, credit movements and orders. There are no advertising pixels or cross-site tracking scripts.
ROOMFLOAT / INFORMATION
What We Do Not Do
We do not train models on your photos, do not sell or rent data, and do not share images with anyone except the rendering provider that has to see them to produce your result. There is no third-party analytics script on this site and no advertising network.
If you ask us to delete your data, we delete the account record and every render within seven days, and confirm by email. Deleting is free and does not require a reason.
ROOMFLOAT / INFORMATION
Who Else Touches Your Photo
Photos are processed by Alibaba Cloud Model Studio to generate images, and by Cloudflare for hosting, storage and image transformations. These providers handle data under their service terms and retention policies.
| Sub-processor | What it does | Where |
|---|---|---|
| Alibaba Cloud Model Studio (Bailian) | image rendering | Singapore region |
| Cloudflare | hosting, private image storage and image transformations | Global infrastructure |
| Stripe and PayPal | checkout and payment processing; no room photos | Provider infrastructure |
Photos and results are stored in a private Cloudflare R2 bucket. Application access expires after seven days, and scheduled cleanup plus object lifecycle rules remove expired files. Global hosting and processing may involve locations outside your country.
If we change the rendering provider, this table changes on the same day the new provider goes live, and the date at the top of the policy moves with it. A photo is never sent to two providers for the same render.
ROOMFLOAT / INFORMATION
Your Rights
You can request a copy of everything we hold about you, ask for corrections, or ask for deletion, by writing to hi@roomfloat.com. Under GDPR and UK GDPR you also have the right to object to processing and to lodge a complaint with your local supervisory authority; under CCPA you have the right to know and to delete, and we do not sell personal information as that term is defined there.