Privacy Policy

1. Scope

This policy explains how RoomMirror (roommirror.com) handles your personal data when you register, upload photos, generate renders, buy credits and use sharing features. It does not cover third-party sites you reach through links.

2. What we collect

Category	Details	Why
Account	Email address, display name, password hash, verification status, signup time	Create and protect your account, sign in, send verification and service emails
Photos you upload	Room photos, floor plans	Generate renders (the core feature)
Generation records	Style, room type, palette/material/lighting preferences, status, credits charged, output images	Show history, retry failed jobs, investigate support cases
Transaction data	Order ID, credit pack, amount, currency, payment status, gateway reference (Stripe customer id or PayPal payer id)	Grant credits, issue receipts, process refunds
Technical logs	IP address, browser/device identifiers, request paths, error stacks	Security, abuse prevention, debugging
Local preferences	UI language, light/dark theme	Remember your display settings (stored in your browser, not uploaded)

We do not collect: identity documents, full card numbers, contacts, precise location, or facial-recognition templates.

3. What happens to your photos

1. You pick a photo in the studio. It is uploaded through our server to Cloudflare R2 private storage, readable only by an authenticated endpoint bound to your account.
2. When you click Generate, the server creates a one-time read URL and sends it, together with the style prompt, to our image-generation provider (Google's Gemini image model, reached through the yir.ai gateway).
3. The model returns renders; we store them back in R2, attach them to your account and display them.
4. Our providers process requests under their own terms. We require them to use the data only to complete the inference and not for training or onward disclosure.
5. We do not run face recognition, identity matching or content profiling on your photos. Please avoid uploading photos with clear faces, identity documents or house numbers.

Visibility: uploads and renders are private by default. A render becomes accessible via /share/<id> only after you click Share, and anyone with the link can then view it. You can revoke sharing at any time.

4. How we use data

• Deliver the core feature: store photos, call the model, display and download results;
• Accounts and security: authentication, email verification, rate limiting, abuse investigation;
• Billing and support: deduct credits, grant purchases, reconcile orders, handle refund requests;
• Product improvement: aggregate usage and failure statistics (no photo content);
• Legal compliance: retain transaction records as required and respond to lawful requests.

We do not sell your personal data and do not use your photos for advertising or third-party profiling.

5. Sharing and processors

We use the following processors and share only the data needed for each task:

• Cloudflare: hosting, database (D1), object storage (R2), outbound email;
• Stripe: card payments (we receive only the payment result and the last four digits of a card);
• PayPal: PayPal payments (we receive the payment result, your payer id and the email address you pay with — never your password);
• yir.ai and its underlying image models: image inference;
• Email provider: verification, refund and account notifications.

We otherwise disclose data only with your explicit consent, to comply with law or a valid legal request, or to protect the safety and property of RoomMirror, our users or the public.

6. Retention

• Account and photos: kept while your account exists. After deletion we remove the account, photos and renders within 30 days; residual backups expire within 90 days.
• Transaction records: kept for 5 years for tax and payment compliance (order and amount only, no photos).
• Technical logs: 30 days, then automatically rolled off.
• Refund requests: kept 3 years after resolution for reconciliation and dispute evidence.

7. Your rights

Email support@roommirror.com to exercise any of these rights. We respond within 15 business days:

• Access and export: obtain a copy of your account details, orders and generation history;
• Correction: update your display name, email or other account details;
• Deletion: delete an individual photo or render, or delete the whole account under Settings → Account;
• Withdraw consent: stop using the Service and have your data deleted; withdrawal does not affect processing already carried out;
• Complaint: lodge a complaint with your local data protection authority.

8. How we protect data

HTTPS everywhere; private-by-default object storage behind authenticated endpoints; per-user query isolation; hashed passwords; production secrets delivered through secret management rather than source control; least-privilege operational access with audit logs.

If a security incident occurs, we notify affected users within 72 hours of confirmation, explaining the scope and the remediation.

9. International transfers

Our servers run on Cloudflare's global network, so your data may be processed outside your country or region. We rely on our providers' data processing terms to require an equivalent level of protection.

10. Minors

The Service is intended for users aged 18 and over. We do not knowingly collect data from minors; if we learn an account belongs to a minor, we delete the account and associated data.

11. Cookies and local storage

See our Cookie Policy for the cookies we use. We do not run third-party advertising trackers on the site.

12. Changes and contact

When this policy changes we update the effective date above; material changes are announced on the site or by email.

Privacy questions: support@roommirror.com.