Privacy Policy

At DecorAI, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI home design application and website.

1. Information We Collect

1.1 Information You Provide

When you use DecorAI, we may collect the following information that you voluntarily provide:

• Account Information: Email address, name, and profile information when you create an account
• Room Images: Photos of rooms you upload for AI-powered design transformations
• Design Preferences: Style choices, color preferences, and design settings you select
• Payment Information: Billing details for premium subscriptions (processed securely by RevenueCat)
• Communications: Messages and feedback you send to our support team

1.2 Information Collected Automatically

When you access our services, certain information is collected automatically:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: Features used, actions taken, time spent in the app, and interaction patterns
• Log Data: IP address, browser type, access times, and pages viewed
• Location Data: General geographic location based on IP address (not precise GPS location)

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Core Service Delivery

• Process and transform your room images using AI technology
• Generate personalized interior design suggestions
• Maintain and improve our AI algorithms and design quality
• Provide customer support and respond to inquiries

2.2 Service Improvement

• Analyze usage patterns to enhance user experience
• Develop new features and functionality
• Conduct research and testing to improve our AI models
• Fix bugs and troubleshoot technical issues

2.3 Communication

• Send service-related notifications and updates
• Provide information about new features (with your consent)
• Respond to customer service requests

3. Data Retention

Other data retention periods:

• Account Information: Retained while your account is active and for 30 days after deletion request
• Usage Analytics: Aggregated and anonymized data may be retained indefinitely for service improvement
• Payment Records: Retained as required by law for tax and accounting purposes (typically 7 years)
• Support Communications: Retained for 2 years to provide consistent customer service

4. Data Sharing and Disclosure

We may share information only in the following limited circumstances:

4.1 Service Providers

We work with trusted service providers who assist us in operating our services. These providers are contractually obligated to protect your data and may only use it to provide services on our behalf:

• OpenAI: AI processing for image analysis and design generation
• Google Gemini: AI processing for enhanced design recommendations
• Microsoft Azure: Cloud infrastructure and AI services
• Firebase (Google): Authentication, database, and app infrastructure
• RevenueCat: Subscription and payment processing
• Google Analytics: Website and app usage analytics
• Vercel Analytics: Website performance and usage analytics
• AppsFlyer: Mobile attribution and marketing analytics
• Meta (Facebook): Advertising measurement and analytics
• Google Ads (AdWords): Advertising measurement and optimization
• AdMob (Google): In-app advertising (free tier only)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or when we believe disclosure is necessary to:

• Comply with applicable laws and regulations
• Protect the rights, property, or safety of DecorAI, our users, or others
• Detect, prevent, or address fraud, security, or technical issues

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

5. Third-Party Services

Our app and website integrate with various third-party services to provide and improve our offerings. Each service has its own privacy policy governing how they handle data:

6. Data Security

We implement robust security measures to protect your personal information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict access controls limit who can access your data
• Regular Audits: We conduct regular security assessments and vulnerability testing
• Secure Infrastructure: Our services run on enterprise-grade cloud infrastructure with built-in security features
• Employee Training: Our team receives regular training on data protection best practices

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

7.1 Access and Portability

You can request a copy of the personal data we hold about you in a portable format.

7.2 Correction

You can update or correct your account information at any time through the app settings.

7.3 Deletion

You can request deletion of your account and associated data. Note that some data may be retained as required by law or for legitimate business purposes.

7.4 Opt-Out Options

• Marketing Communications: Unsubscribe via email links or app settings
• Push Notifications: Manage through your device settings
• Analytics: Use platform-specific opt-out tools (e.g., Google Analytics Opt-out Browser Add-on)
• Personalized Advertising: Adjust settings in your device's privacy controls

7.5 Data Restriction

You can request that we limit the processing of your personal data in certain circumstances.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and European Union. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with our service providers
• Compliance with applicable data protection frameworks

9. Children's Privacy

DecorAI is not intended for children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.

10. Cookie Policy

Our website uses cookies and similar tracking technologies to:

• Remember your preferences and settings
• Understand how you use our website
• Improve our services and user experience
• Measure advertising effectiveness

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification for material changes
• Displaying an in-app notification

We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.

13. Region-Specific Provisions

13.1 European Economic Area (EEA) Residents

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

13.2 California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. Note: We do not sell personal information.

13.3 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions where we operate. If you have questions about your specific rights, please contact us.