Legal
Privacy Policy
Plain language, because a policy nobody reads protects nobody.
What We Store
- Your photos, only for as long as a render needs them. The source photo is deleted when the job completes unless you keep the render it produced.
- Your renders, for twelve months, so History works on a second device.
- A random visitor cookie that identifies this browser. No name, no email unless you create an account.
- Payment records: amount, currency, provider reference and the last four digits of the card. Card numbers never reach our servers.
- First-party usage counters (which page, which button, how long a render took). No cross-site tracking, no advertising pixels.
What We Do Not Do
We do not train models on your photos, do not sell or rent data, and do not share images with anyone except the rendering provider that has to see them to produce your result. There is no third-party analytics script on this site and no advertising network.
If you ask us to delete your data, we delete the account record and every render within seven days, and confirm by email. Deleting is free and does not require a reason.
Who Else Touches Your Photo
Rendering is not something we do on our own hardware: the photo goes to one image-model provider, which returns a picture and keeps nothing beyond the request. That provider is our only image sub-processor, and it is the only third party that ever sees a photo.
| Sub-processor | What it does | Where |
|---|---|---|
| Alibaba Cloud Model Studio (Bailian) | image rendering | Singapore region |
| Stripe, PayPal, Creem | payments; they see the email and card, never the photo | EU / US |
Finished renders are stored with the hosting provider that serves this site, in the region named in our deployment configuration; that region is the one your own data-protection authority would be asked about.
If we change the rendering provider, this table changes on the same day the new provider goes live, and the date at the top of the policy moves with it. A photo is never sent to two providers for the same render.
Your Rights
You can request a copy of everything we hold about you, ask for corrections, or ask for deletion, by writing to privacy@roomfloat.com. Under GDPR and UK GDPR you also have the right to object to processing and to lodge a complaint with your local supervisory authority; under CCPA you have the right to know and to delete, and we do not sell personal information as that term is defined there.
Retention in one line: source photos minutes, renders twelve months, payment records seven years because tax law requires it.
Questions people ask before they upload
Do you use cookies?
One functional cookie that identifies your browser so your credits and History survive a refresh. No advertising or analytics cookies; page events are counted server-side without a cookie.
Where are images stored and processed?
Renders are written to object storage in the region this site is deployed in, and the source photo is sent to an image-model provider for the duration of one render, then discarded there. The provider and its region are listed in the sub-processors section above.
How do I delete my data?
Email privacy@roomfloat.com from any address, or delete individual renders from History. Account deletion removes everything within seven days.