Legal
Privacy Policy
Last updated: 10 October 2026.
This policy explains how Roomico processes information when you create an account, upload room photos, generate interior variants and use renovation planning features.
Data controller and contact
The personal data controller identified for Roomico is Nono Bartosz Jaworski, NIP 8652435426. Privacy requests: info@roomico.app.
The operator's current registration details and business address require verification before commercial launch.
Information we process
We may process account details, authentication provider data, project names, room photos, measurements you provide, design preferences, generated images, technical logs and service preferences.
Why we use the data
We use this information to provide and secure Roomico, preserve your projects, generate requested AI outputs, improve reliability, provide support and comply with legal obligations. Optional marketing communication is used only when you choose it.
AI and service providers
Room photos and project instructions may be sent to infrastructure, authentication, storage and AI providers only as needed to deliver the feature you request. Providers may process data under their own contractual security and privacy obligations.
Retention and deletion
Project data is kept while your account or project remains active, subject to operational backups and legal retention requirements. Deleting a project removes its project records and stored project media from the active service.
Your rights
Where GDPR applies, you may have rights to access, correct, erase or restrict your data, receive portable data, object to processing and withdraw consent without affecting earlier lawful processing. You may also complain to the competent supervisory authority.
Cookies and local storage
Roomico uses essential browser storage for authentication, security and interface preferences. See the Cookie Policy for more information.
Contact and updates
For privacy requests, use the contact address above. We may update this policy when the service, providers or applicable law changes.
AI processing and service providers
Room photos, project descriptions and optional measurements may be transmitted to AI processing services to generate results. Authentication, database storage, hosting and payment processing are provided through third-party infrastructure, including Supabase, Vercel and Stripe where configured. Actual AI providers, sub-processors, processing locations and international-transfer safeguards must be verified and documented before commercial launch.
Retention, deletion and lawful grounds
Service delivery and billing may require processing to perform a contract or comply with legal obligations. Separate consent is needed for optional marketing where required; consent may be withdrawn. Retention periods depend on account and project status, tax and legal duties and backup policies, which must be specified before launch. You may request access, correction or deletion through the Contact page, subject to applicable legal restrictions.