Privacy & Security: How We Protect Your Data

Data Protection

What We Collect

• Account information (email, name)
• Uploaded photos (for processing)
• Usage analytics (anonymous)
• Payment information (via Stripe)

What We Don't Do

• Sell your personal data
• Share photos with third parties
• Use your photos to train public AI models
• Store payment card details directly

Photo Privacy

Photo Processing

1. Photos are encrypted during upload
2. Processed by our AI systems
3. Results stored in your private gallery
4. Original photos can be deleted anytime

Photo Usage

• Your photos are NEVER used to train public AI models
• Photos remain private unless you choose to share
• We don't access or view your photos manually

Photo Deletion

• Delete individual photos from gallery
• Bulk delete options available
• Deleted photos removed from servers within 30 days

Encryption Standards

In Transit

• All data transmitted via HTTPS/TLS 1.3
• Secure WebSocket connections
• Certificate pinning on mobile

At Rest

• AES-256 encryption for stored data
• Encrypted database backups
• Secure key management

Authentication

• Powered by Clerk authentication
• Secure token-based sessions
• Password hashing with bcrypt

Your Privacy Rights

GDPR Rights (EU Users)

• Right to access your data
• Right to data portability
• Right to erasure (deletion)
• Right to rectification
• Right to restrict processing

CCPA Rights (California Users)

• Right to know what data is collected
• Right to delete personal information
• Right to opt-out of data sale (we don't sell)
• Right to non-discrimination

Exercising Your Rights

1. Email: privacy@roomenhance.com
2. In-app: Account > Privacy settings
3. Response within 30 days