roomvelo
Legal · Privacy

Privacy Policy

Last updated 15 May 2026 · GDPR-aligned · Hosted in the European Union

Sections
  1. Who we are
  2. What we collect today
  3. What we’ll collect later
  4. Why we collect it
  5. Who we share it with
  6. How long we keep it
  7. Your rights
  8. Cookies
  9. Contact
01

Who we are

roomvelo is an independent project based in Vilnius, Lithuania. We’d rather tell you exactly what is true today than describe a finished product, so this policy is written for what roomvelo actually is right now: an early preview with a browser-based 3D room demo and a waitlist. roomvelo is the data controller for the personal data it processes. You can reach us at rpreikstaitis@gmail.com.

02

What we collect today

In the current preview the data we actually process is deliberately small:

  • Waitlist email - if you join the waitlist, we store your email address and your language choice so we can invite you when access opens. That is the only reason we hold it.
  • Account data - if you create an account to try the demo, your email and (optionally) name, handled by our authentication provider Clerk.
  • Usage data - request counts used to enforce per-user limits. Anonymous calls are keyed on a one-way SHA-256 hash of the client IP, never the raw IP itself.

The 3D demo runs in your browser with a small set of sample products. It does not require an account and does not send your room or your edits to a server.

03

What we’ll collect later

Several features are still in development and are not live, so none of the data below is collected today. We list it here so the policy is honest about the direction, and we will update this page and ask for any consent we need before any of it ships:

  • Room photos and the AI analysis we would derive from them (depth, segmentation, room dimensions) - photo upload is not built yet.
  • Saved designs - styled rooms, matched products, and any chat used to refine them, once designs can be saved to an account.
  • Click data - if and when real retailer links exist, the product and a hashed IP so we can count outbound clicks. roomvelo has no affiliate partnerships today and the demo’s retailer buttons are inactive placeholders.
04

Why we collect it

We use your data only for the purposes below. None of it is sold, rented, or shared for advertising.

  • To run the preview and waitlist - let you try the demo and email you when it’s your turn for early access. (Legal basis: consent / contract.)
  • To prevent abuse and runaway costs - daily quotas keyed on a hashed IP and, if you’re signed in, your Clerk user ID. (Legal basis: legitimate interest.)
  • To improve the product - error reporting and aggregated, non-identifying usage metrics. (Legal basis: legitimate interest.)
05

Who we share it with

We use a small number of trusted processors. Each only receives the minimum needed to do its job.

  • Clerk - authentication and session handling. Receives: your email, name, sign-in metadata.
  • Hosting and database - our infrastructure providers (within the EU) hold the database, including waitlist emails. They are processors under contract and don’t access content for their own purposes.
  • AI providers (e.g. Replicate, OpenAI, Anthropic) - not used in the public preview. When AI room features ship, they will receive only the inputs needed for that feature, and this page will be updated first.
  • Retailers - roomvelo has no affiliate or partnership data flows today. If real retailer links are added, a referral tag may identify roomvelo as the source; no account data is shared unless you choose to sign in on the retailer’s site.
06

How long we keep it

  • Waitlist email - until you ask us to remove it, or until the waitlist is retired after launch.
  • Account data - until you delete your account.
  • Usage logs - 13 months rolling, then aggregated and the row-level data discarded.
  • Backups - encrypted and rotated. Deletion requests are honored on the live database immediately and propagate through backups on the next rotation.
07

Your rights

Under the GDPR you have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to legitimate-interest processing. To exercise any of these, email rpreikstaitis@gmail.com from the address you gave us. We respond within 30 days.

If you believe we’ve handled your data improperly you can complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) at vdai.lrv.lt.

08

Cookies

We set the smallest set of cookies needed to keep you signed in and to enforce per-user limits. We don’t use third-party advertising or behavioural-tracking cookies. To count visits we use Vercel Web Analytics - a privacy-friendly, cookieless tool that measures aggregate traffic without cookies and without identifying you personally, so it needs no consent banner.

09

Contact

Questions, complaints, or data requests: rpreikstaitis@gmail.com. roomvelo is based in Vilnius, Lithuania; a postal address is available on request.

See also our Terms of Service.