Privacy Notice

Version: 10 October 2026

Who is responsible

Room & Story is our trading name. The legal entity operating Room & Story is the controller responsible for your personal data. Its full legal name, address and registration details are provided in our Legal Notice. In this notice, “Room & Story”, “we”, “us” and “our” refer to that controller. Contact hello@roomandstory.com for privacy requests.

What we collect and why

• Account information: sign-in identifier, email and any name supplied by your sign-in provider, to authenticate you and associate your projects with your account.
• Design content: room photos, inspiration, floor-plan and engineering drawing images, reviewed drawing details, project names, instructions, room and style choices, generated images and videos, and your design feedback. We process these to provide your requested service and saved workspace, on the basis of performing our contract with you.
• Service records: generation status, credit usage, errors, timestamps, file type and size, file fingerprints, and permission records. We use these to operate and secure the service, troubleshoot requests and prevent abuse, based on our legitimate interests in reliable and secure operation. Where records are required by law, our basis is legal obligation.
• Optional learning: if you separately opt in, eligible future uploads, outputs, preferences and feedback may be reviewed to improve the service or considered for an internal research library. Consent is the basis for these additional uses.
• Billing and correspondence: We use contact details, messages and billing records to handle requests and manage your plan. Stripe handles payment card details.

Connected social accounts

If you connect Pinterest or an Instagram business or creator account, we store an encrypted access token until you disconnect or delete your saved design data. We use read access to display your boards or your own posts. Instagram saved collections are not available. Board browsing is live; images are saved only when you explicitly import them where importing is supported. Imported images remain private and are excluded from optional service improvement and research use. Selecting an imported image for a design sends it to the generation providers described below. Only import images you have permission to use this way.

Disconnecting removes our stored access token and stops further access; previously imported photos remain until you delete your design data. You can also revoke access in Pinterest or Instagram settings. Connections expire and may need reconnecting. Sharing to a social platform is a separate action you initiate, subject to that platform’s privacy rules. We do not post automatically.

Shop the look

When you run a shopping search, we send your selected image, description, language and shopping country to OpenRouter and its AI and web-search providers to identify similar items and find retailer pages. Shopping images and descriptions are not saved to your workspace by this feature. Providers may retain request data under their own policies. We keep a daily hashed network identifier and search count for up to 24 hours to limit abuse. Opening a retailer link does not send your image to that retailer.

Three separate layers

Your private workspace: files and design records are stored for you. Access through the app requires your authenticated account. Authorised personnel and service providers may access data when necessary for operation, support, security or a legal obligation.

Optional service improvement: our authorised team may examine eligible images, outputs, choices and feedback to assess quality and improve design workflows. This is not permission to train a model. We do not include identifiable rooms, addresses, people or confidential instructions in reports shared across customers.

Optional internal research library: eligible content may be selected for private design research and benchmarking. The library references the same private files; it does not create a public gallery or independently retained copy. Public display, model training, resale and external dataset licensing are outside these permissions and require a separate agreement and any necessary rights.

Both optional choices are off by default and can be changed in Data & privacy. Declining does not affect the service. Permission applies to future uploads only. Withdrawing it removes earlier files from that optional use; switching it on again does not re-enrol earlier files. Withdrawal does not invalidate lawful processing before withdrawal. Genuinely anonymous findings that cannot identify you may remain.

Sharing and friend invitations

Sharing is a separate choice you make for selected designs. Anyone with a share link can view and save those images; the original photo is included only if you select it. Private project names, instructions and reference uploads are not published. You can revoke links in the sharing panel. Deleting saved design data also removes your share links, but cannot recall downloaded copies.

A first-party browser cookie, lasting up to 90 days, is set when you vote and remembers your choice on shared designs. Shared-link records count visits, votes, new users and first completed designs. Invitation records associate eligible accounts and keep a hashed email identifier to prevent duplicate rewards. These reward and anti-abuse records remain when you delete design files; contact us to request account closure or deletion of remaining records. See Friend invitations & sharing for the offer and controls.

Who processes your data

• OpenAI Sites and Cloudflare provide hosting, the D1 database and private R2 file storage.
• Supabase or ChatGPT, depending on your sign-in method, provides authentication.
• When you request a generation, selected images and instructions are sent to OpenRouter for images, or Higgsfield for video, and their relevant model providers. They receive the inputs needed to fulfil that request. AI processing may create provider-hosted copies or temporary file links outside our private storage.
• Stripe handles checkout and subscription administration when used.
• We may disclose data where required by law or necessary to protect rights and service security.

These providers can have their own retention practices and international processing locations. We do not promise EU-only storage or zero retention by generation providers. Contact us for information about the arrangements applicable to your request. We do not sell your uploads or grant model-training rights through these optional settings.

Retention and deletion

Saved project files, briefs, outputs and feedback remain in your workspace while needed to provide your saved design history, until you delete saved design data or request account closure. The same limit applies to identifiable content considered for optional learning, and withdrawing consent ends the corresponding optional use. Storage is not a promise of permanent archival availability; keep your own copies of important files.

Delete saved design data removes project records and private files from active Room & Story storage. Generation must finish first. The action preserves your sign-in account, credits, billing records and a minimal permission history. It does not itself cancel a subscription or erase copies already downloaded by you. Request account closure, provider-copy deletion or deletion of remaining records by email. Authentication, billing, permission, security and legal-claim records are kept only for their relevant operational or legal purpose; applicable legal retention can limit deletion. Provider backups and logs follow the provider’s retention and deletion arrangements, rather than the immediate workspace deletion action.

Your rights

Where applicable, you can request access, correction, erasure, restriction, portability and object to processing based on legitimate interests. You can withdraw optional consent at any time. Download project records and files in Data & privacy, or email us for assistance and account closure. We may need proportionate verification of your identity. We normally respond to GDPR requests within one month; if a lawful extension is necessary we will explain it.

You can complain to your local data-protection authority, including Portugal’s CNPD. We do not use your uploads to make automated decisions producing legal or similarly significant effects about you.

Protecting the people in your photos

The service is for adults aged 18 or over. Only upload files you may lawfully use. Remove faces, children, personal documents, addresses, access codes and sensitive information before uploading. Permission to photograph a property does not necessarily include permission to use its occupants’ personal data for research. Optional research permission must cover all relevant rights.

International processing and changes

Providers may process data outside your country, including outside the EEA. Applicable data-protection law requires an appropriate basis and safeguards for these transfers. Contact us for the relevant locations and a copy or explanation of applicable safeguards. We will update this notice when the service changes and seek fresh permission before materially expanding optional uses.