Privacy Policy

1. Introduction

Get AI Room Design ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI image tools.

2. Information We Collect

2.1 Account Information

• Your email address, name and profile picture from your Google account, used to sign you in
• Account creation date and last sign-in time

2.2 Payment Information

• Transaction records (processed by Waffo, our merchant of record)
• Credit balance and purchase history
• We do NOT store credit card numbers or full payment details

2.3 Usage Data

• The choices you make in the tool (room, style, color or material) and the images you upload
• The images you generate
• Generation records: time, tool, size, and credits used
• Moderation records: for every check on your prompt, your attached photos and your results, the time, your account, which check ran, what it decided and why. We don't keep the images that fail, or your full prompt, in these records
• While you're signed in: when the buy box appears for you and when you open checkout, with the time and where on the site, so we can see where people stop before buying
• The country a visit comes from, as the two-letter code our host Cloudflare adds to each request, recorded with those steps and with daily totals (such as how many people were sent to sign in or started an image), so we can see where visitors from each country stop. We don't store your IP address with them
• When you sign in outside the European Economic Area, the UK and Switzerland, where you first came from, if our first-visit cookie (section 6) holds it: the kind of site that sent you and the link's utm_source tag, each as a name from a fixed list (such as Google, ChatGPT or Bing, or "other"), your first page if it's one of our pages, and the date. We keep it with your account so we can see which sites bring customers

2.4 Technical Data

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on site

3. How We Use Your Information

• To provide and maintain the Service
• To process payments and manage your credit balance
• To communicate important updates and support responses
• To fix problems and improve the Service. We don't use your prompts, uploads or images to train AI models.
• To detect and prevent fraud or abuse, and to check prompts and images against our Acceptable Use Policy
• To comply with legal obligations

4. Data Storage and Security

• Account and generation records are stored with Supabase
• Images you upload to our AI tools, and the images the tools make, are stored with Cloudflare R2. Each file sits at a long random web address: anyone who has that exact address can open it, but we never publish or list these addresses
• All data transmission is encrypted using TLS/SSL
• Passwords are hashed using industry-standard algorithms
• Access to production data is restricted and logged
• We conduct regular security reviews of our systems

5. Third-Party Services

We use the following third-party services:

• Supabase: sign-in and database
• Waffo (Waffo.com Limited): payments, as our merchant of record. It handles your card details, any sales tax or VAT, and refunds; with each checkout we send it your email address and account ID, so the purchase reaches your account. It also checks each prompt with Prompt Sift, its content-safety service, before an image is made, and says it doesn't keep the prompt text after the check
• Cloudflare: hosting, image storage, and counting visits with Cloudflare Web Analytics
• Google Analytics: counting visits and the steps people take on the site (uploading a photo, generating, signing in, opening checkout, paying) with the tool, size, credits and pack involved. We never send it your prompts, your photos, your email address or your name
• fal.ai: runs the AI models. It receives your prompt and any images you attach, and passes them to the model's maker (for GPT Image 2.5, OpenAI) to create the result. It also runs the image check on the photos you attach and on every result, the room check on each photo and, when you describe the change yourself (Custom), the check on your words and the check on the finished design, which fal runs with Google's Gemini models through OpenRouter
• Google: sign-in with your Google account
• OpenAI: the GPT Image 2.5 model, which receives your prompt and photo through fal.ai to create the result

Each third-party service has its own privacy policy governing their use of your data.

6. Cookies and Tracking

• Essential Cookies: Required for authentication and session management
• We don't use advertising cookies. We count visits with Cloudflare Web Analytics, which doesn't use cookies and only reports totals, such as how many people viewed a page and where they came from
• Google Analytics: outside the European Economic Area, the UK and Switzerland, it sets its own cookies (such as _ga) to tell one visit from another. Inside those regions it sets no cookies, and Google only receives counts without them. You can turn it off with Google's opt-out add-on.
• Where you came from: outside the European Economic Area, the UK and Switzerland, the first page you open here sets one cookie, gss_src, for 90 days. It holds only the kind of site that sent you and the link's utm_source tag, each as a name from a fixed list (such as Google, ChatGPT or Bing, or "other"; never the site's full address or the tag as typed), the page you landed on and the date. If you sign in, we save those with your account (section 2.3). Inside those regions it isn't set.

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

7. Data Retention

• Account data is retained while your account is active
• Uploads and generated images are kept so you can download them again, until you ask us to delete them or close your account
• Payment records are retained for 7 years for legal compliance
• Moderation records are kept for at least 12 months, so we can answer reports and reviews
• Upon account deletion, personal data is removed within 30 days

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to processing of your personal data

To exercise these rights, contact support@getairoomdesign.com. We respond within 30 days.

9. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or Service notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact:

• Email: support@getairoomdesign.com