Roomloops

Privacy Policy

Last updated: September 22, 2026

This Privacy Policy describes how Tomorrow Group LLC dba Roomloops("Roomloops," "we," "us") collects, uses, and shares information about you when you use our website and services (the "Service"). By using the Service you agree to the practices described here.

1. Information we collect

Information you provide

  • Account data. Email address, password (hashed), and any name you enter.
  • Content. Photos you upload, listing URLs you submit, video titles you edit, and any messages you send us.
  • Payment data. Payment card details are collected and processed by Stripe, Inc.; we do not store full card numbers on our servers.

Information collected automatically

  • Usage data. Pages visited, actions taken, timestamps, video render metadata, and diagnostic events.
  • Device data. IP address, browser type and version, operating system, and referring URL.
  • Cookies and similar technologies. We use essential cookies to keep you signed in and to secure your session. We do not use third-party advertising cookies.
  • Product analytics and session replay. We use Google Analytics and Microsoft Clarity to understand how people use the Service — for example, which pages are visited, where users get stuck, and how the site is navigated. Clarity records interactions such as clicks, scrolling, and mouse movement to produce session replays and heatmaps; text typed into form fields is masked and is never captured. When you are signed in, these tools receive a random internal account identifier, never your email address or payment details.
  • Attribution. When you arrive from a link or an ad, we store the campaign parameters in the link (such as the utm_source value), the referring website's domain, and the page you first landed on, in a first-party cookie, and associate them with your account when you sign up. We use this to understand which channels bring in customers.

2. How we use your information

  • Provide, operate, and improve the Service (including analyzing your photos and generating videos).
  • Process payments and manage subscriptions.
  • Communicate with you about your account, transactions, product updates, occasional promotional offers, and support requests. You can unsubscribe from marketing emails at any time via the link in every marketing message or from your account settings. Transactional messages (receipts, password resets, job notifications) continue regardless of your marketing preference.
  • Monitor for fraud, abuse, and violations of our Acceptable Use Policy.
  • Comply with legal obligations.

3. Automated and AI-assisted processing

Your uploaded photos and listing information are processed by automated and AI-assisted services to analyze image content, group images by room, select shots, and generate the finished video. Photos are transmitted to the third-party providers listed in section 4 only for the duration of processing and are not used by us to train any AI model.

We may also use AI to generate or enhance image content in the future — for example, to create additional stills, upscale low-resolution photos, remove or add elements to a scene, or produce supplementary visuals used in your video. When we do, the resulting content will still be reviewed and released to you as part of your generated video, and material changes to the categories of AI providers we rely on will be reflected in this Privacy Policy and its "Last updated" date.

Generated output may contain automated or AI-generated elements. You are responsible for reviewing every generated video for accuracy and for confirming you have all necessary rights and permissions to the photos, listing information, and other content you submit before publishing or distributing the result.

4. Third-party service providers

We share information with the following categories of service providers, each contractually bound to use the data only to provide services to us:

  • Stripe, Inc. — payment processing and subscription management.
  • Supabase, Inc. — authentication, database, and file storage.
  • OpenAI, L.L.C. — image analysis and content categorization via AI models. We may add additional AI providers for image analysis, generation, or enhancement in the future; changes will be reflected in this policy.
  • Resend — transactional and notification email delivery.
  • Vercel, Inc. — website hosting.
  • Railway Corporation — backend application hosting.
  • Google LLC — website analytics (Google Analytics).
  • Microsoft Corporation — session replay and heatmaps (Microsoft Clarity).

We do not sell your personal information. We do not share your personal information with advertisers.

5. Data retention

  • Uploaded photos are retained while your video job is being processed and for a short additional period to allow re-rendering. They are deleted or made inaccessible thereafter.
  • Generated videos and their thumbnails are retained while your account is active. You may delete any video from your dashboard at any time, which removes it from our storage.
  • Account and billing records are retained for as long as your account is open and for the period required by applicable tax, accounting, and legal-hold requirements after deletion (typically up to 7 years for financial records).

6. Your rights

You may:

  • Access, update, or correct your account information from your dashboard.
  • Delete individual videos and their source photos at any time from your dashboard.
  • Request full deletion of your account by emailing privacy@roomloops.com. We will process the request within a reasonable time, subject to legal retention requirements.
  • Request an export of the personal data we hold about you.

California residents (CCPA/CPRA)

Residents of California have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any "sale" or "sharing" of personal information (we do neither). Contact us at privacy@roomloops.com to exercise these rights.

European Economic Area / United Kingdom

If you are located in the EEA or UK, you have the rights of access, rectification, erasure, restriction, portability, and objection under the GDPR / UK GDPR. Our lawful basis for processing is your consent (by creating an account) and our legitimate interest in providing and securing the Service. Data is processed in the United States; we rely on standard contractual clauses with our sub-processors where required.

7. Security

We use commercially reasonable technical and organizational measures to protect the personal information we handle, including encryption in transit (HTTPS), encrypted at-rest storage, access controls, and least-privilege service accounts. No online service is completely secure; we cannot guarantee absolute security.

8. Children

The Service is not directed to individuals under 18 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced by email or a notice on the Service. The "Last updated" date at the top reflects the latest revision.

10. Contact

Tomorrow Group LLC dba Roomloops
Attn: Privacy
privacy@roomloops.com