Privacy Policy

Who we are

Roomlyst provides AI-assisted room visualisation tools. This policy explains how we handle personal information when you use roomlyst.uk, create an account, upload a room photo, buy a subscription or contact us. Questions and privacy requests can be sent to megor.studio@gmail.com.

Information we collect

• Account and contact information, including your email address.
• Room photos, design instructions, generated images and related project data that you choose to submit.
• Subscription and transaction records. Stripe processes payment-card details; Roomlyst receives billing identifiers and payment status.
• Technical and usage information such as device, browser, IP address, session, page and conversion events.
• Messages, feedback and support correspondence.

How we use information

We use information to provide and secure the service, authenticate users, process subscriptions, generate and preserve designs, send requested or service-related email, answer support requests, prevent abuse, maintain backups, measure performance and meet legal obligations. Depending on the context, we rely on performance of our contract, legitimate interests, consent or compliance with law.

Service providers

We use specialist providers for hosting and infrastructure, image generation, payment processing, email delivery, analytics and advertising. These include Stripe, Resend and Google. They process information under their own terms and our instructions where applicable. We do not sell personal information.

Google API data

Roomlyst uses Google Drive API access for encrypted operational backups. Access is limited to files created by the application. We do not read, sell or use other Google Drive content for advertising, and we do not transfer Google user data except as needed to provide or secure this backup function or as required by law. Our use of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.

Cookies and measurement

Roomlyst and its providers may use cookies or similar storage for sign-in, security, preferences, analytics and advertising measurement. Browser and device controls can limit optional storage, although essential functions may require it.

Retention and security

We retain information for as long as needed to provide the service, maintain security and backups, resolve disputes and meet accounting or legal requirements. Retention varies by record type. We use access controls, encryption in transit and protected backups, but no online service can guarantee absolute security.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where it applies. You may also complain to your local data-protection authority. Contact us using the address above. We may need to verify your identity before completing a request.

International transfers and changes

Providers may process information in other countries. Where required, we use recognised safeguards for those transfers. We may update this policy as the service changes; the effective date above identifies the current version.