1. Who is responsible for your data
roomly is a business based in the United Kingdom, operating roomlyinteriors.com. We are the data controller for the personal data described here. Contact us at contact@roomlyinteriors.com and we will reply as soon as possible.
2. What we collect
- Account details — your email address, your practice name, and a password. Passwords are stored only as a cryptographic hash; we never see the password itself.
- Subscription details — your plan, its status and renewal date. Card details are handled entirely by Stripe and never reach our servers.
- What you put into the tool — property and room photographs, written style briefs, and the supplier websites you send us so we can build your library.
- Technical records — server and security logs, including IP address and browser, kept to keep the service running and to investigate abuse.
Property photographs may show interiors, and occasionally people. Please do not upload photographs containing more personal information than the job needs.
3. Where your schemes are stored
Your saved properties and schemes are stored on your roomly account, so they follow you between devices and are shared with colleagues on the same account. They are held in the UK and isolated at the database level, so no other practice can read them.
The photographs you upload are stored with the scheme, so reopening a property shows the rooms as well as the specification. They are held in the UK in private storage, reachable only through short-lived links issued to your own account, and are deleted with the property.
4. Why we use it, and our lawful basis
- To provide roomly — running your account, generating recommendations, building your library. Basis: performance of a contract.
- To take payment — billing and invoicing through Stripe. Basis: performance of a contract, and legal obligation for tax records.
- To email you about your account — confirmation, password reset, invitations, and telling you your library is ready. Basis: performance of a contract.
- To keep the service secure and working — logging, rate limiting and abuse investigation. Basis: our legitimate interests in protecting the service and its customers.
We do not send marketing email, and we do not sell personal data to anyone.
5. AI processing
To interpret a scheme, roomly sends your property photographs, your written brief and photographs of pieces you have already chosen to our AI provider for analysis. The ranking stage that follows sends only text — product names, prices, dimensions and tags — never product imagery.
They process this only on our instructions, as our processor. Your content is not used to train AI models. This processing takes place outside the UK; see section 6.
6. Transfers outside the UK
Your account data is held in the UK. Some of the service providers we rely on to run roomly — for hosting, payments, email delivery and AI analysis — process data in the EU or the United States, each under a data processing agreement. Where data leaves the UK we rely on the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses, or on adequacy regulations where they apply.
7. How long we keep it
- Account and practice data — while your subscription is active, and for 12 months after it ends so you can come back without losing your setup. Then deleted.
- Photographs — kept with the property they belong to, for as long as you keep that property. Deleting the property deletes them.
- Billing records — six years, as UK tax law requires.
- Security and email logs — up to 12 months.
You can ask us to delete your account sooner. See section 9.
8. Cookies
roomly sets only the cookies needed to keep you signed in and to keep sign-in secure. There is no advertising, tracking or analytics cookie, so there is no consent banner — strictly necessary cookies do not require consent. Blocking them will stop you being able to sign in.
9. Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it if it is wrong;
- delete it, where we have no continuing reason to keep it;
- restrict or object to how we use it;
- send it to you, or another provider, in a portable format.
Email contact@roomlyinteriors.com and we will reply as soon as possible, and in any case within one month, as the law requires. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
10. Security
Data is encrypted in transit. Each practice’s data is isolated at the database level, so one account cannot read another’s. Passwords are hashed. Card details never touch our systems. No system is perfectly secure, but we will tell you and the ICO promptly if a breach affects you.
11. Changes
We will update this page when our processing changes, and email account owners if the change is material. See Terms of Service for the terms the service is provided on.