HomePrivacy Policy

Privacy Policy

Effective Date: May 3, 2026  ·  Last Updated: May 3, 2026

RoomUp AI

RoomUp AI is developed and operated by VSN CAPITAL LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information. We do not sell your personal information, and we do not use your photographs to train our AI models.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed by VSN CAPITAL LLC in connection with the Service. It does not apply to (a) any third-party website, application, or service that may be accessed through the Service, or (b) information collected by the Apple App Store or Google Play Store in connection with your purchase of the Service. Those third parties have their own privacy policies, which we encourage you to review.

VSN CAPITAL LLC is the controller of personal information collected through the Service. For data-protection inquiries, contact us at [email protected].

2. Personal Information We Collect

We collect the following categories of personal information, depending on how you interact with the Service:

2.1 Information You Provide Directly

  • Account information: name, email address, password (stored in encrypted form), and any optional profile information you choose to provide.
  • User Content: photographs of interior spaces and any captions, notes, style preferences, or other content you upload to the Service.
  • Communications: the contents of any message, support request, or feedback you send to us.
  • Payment information: when you subscribe to a paid plan, your payment information is processed by our payment processors (e.g., Stripe, Apple, or Google). VSN CAPITAL LLC does not store full payment-card numbers on its own servers; we receive only limited information such as the last four digits, card brand, and expiration date.

2.2 Information Collected Automatically

  • Device and technical data: IP address, device type, operating system, browser type, application version, screen resolution, time zone, and approximate location (derived from IP address).
  • Usage data: pages or screens viewed, features used, AI redesigns generated, time spent in the Service, click and tap data, error logs, and similar interaction data.
  • Cookies and similar technologies: see Section 18 for details.

2.3 Information from Third Parties

  • Authentication providers: if you sign in using a third-party login (e.g., Apple, Google), we receive basic profile information authorized by that provider.
  • Analytics and advertising partners: aggregated or pseudonymous information about your interaction with our marketing campaigns on platforms such as TikTok, Meta (Facebook/Instagram), and Google Ads.
  • App Stores: limited transactional data, such as confirmation of a purchase, returned by the Apple App Store or Google Play Store.

2.4 Sensitive Information

We do not intentionally collect sensitive personal information. Photographs of your home generally do not constitute sensitive information, but you should not upload images that contain such data.

3. How We Collect Information

  • directly from you when you create an Account, upload User Content, contact support, or make a purchase;
  • automatically through the Service using cookies, SDKs, mobile identifiers, log files, and analytics tools;
  • from third-party providers, such as authentication providers, payment processors, App Stores, and advertising partners.

4. How We Use Personal Information

  • Service delivery: to create and manage your Account, generate AI redesigns from your photographs, store your design history, and provide customer support.
  • Subscriptions and billing: to process payments for the Weekly Plan (US$ 8.99) and the Monthly Plan (US$ 24.99), manage renewals, prevent fraudulent charges, and comply with tax and accounting obligations.
  • Personalization: to remember your preferences, recommend decoration styles, and improve your experience.
  • Communications: to send service-related notices and, where you have opted in, marketing communications.
  • Analytics and improvement: to analyze how the Service is used in aggregate, diagnose technical issues, develop new features, and improve performance.
  • Marketing: to measure the effectiveness of advertising on platforms such as TikTok, Meta, and Google, and to deliver relevant advertising.
  • Security and fraud prevention: to detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
  • Legal compliance: to comply with applicable laws, regulations, court orders, and lawful requests from public authorities.

6. Photographs and AI Processing

6.1 What Happens When You Upload a Photograph

When you upload a photograph to the Service, the image is securely transmitted to our cloud-hosted servers, processed by our AI redesign models to generate visualizations, and stored in your design history so that you can access it later.

6.2 Third-Party AI Inference Providers

To generate AI Outputs, your uploaded photographs may be temporarily transmitted to and processed by third-party AI inference providers acting as our service providers under contractual confidentiality and data-protection obligations. These providers process your photographs solely for the purpose of generating AI Outputs at our instruction and are contractually prohibited from using your photographs for their own purposes, including the training of their own models.

6.3 No Use of Your Photographs to Train Our AI Models

VSN CAPITAL LLC does not use your photographs or AI Outputs to train, fine-tune, or evaluate our AI models without your separate, explicit, opt-in consent. We also contractually require our third-party AI inference providers not to use your photographs for their own training or improvement purposes.

6.4 Encryption and Access Controls

Photographs are encrypted in transit (TLS 1.2 or higher) and at rest using industry-standard encryption. Access to stored photographs is restricted to authorized personnel and automated systems on a need-to-know basis.

6.5 Faces and Identifiable Persons

Although the Service is designed for interior spaces, you should not upload photographs containing identifiable persons unless you have obtained their informed consent. We do not perform facial recognition on uploaded photographs.

6.6 Deletion of Photographs

You may delete any photograph or AI Output from your Account at any time. Deletion requests are processed promptly, and the data is removed from active systems within thirty (30) days, subject to limited retention in encrypted backups for security and legal-compliance purposes.

7. How We Share Personal Information

We do not sell your personal information for monetary consideration. We share personal information only as described below:

  • Service providers: with trusted third-party vendors who process personal information on our behalf to deliver the Service.
  • Payment processors: with Stripe, Apple, Google, and other payment processors as necessary to process subscriptions and refunds.
  • Analytics and advertising partners: with platforms such as Google Analytics, Meta Pixel, TikTok Pixel to measure performance of the Service and our marketing campaigns.
  • Legal and safety: with law-enforcement authorities, regulators, or other parties when we believe in good faith that disclosure is necessary to comply with applicable law.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business.
  • With your consent: for any other purpose disclosed to you and to which you consent.

8. Service Providers and Sub-Processors

We engage trusted third-party service providers to support the operation of the Service. These providers are bound by contractual obligations to handle personal information confidentially.

ProviderPurposeLocation
Cloud hosting (e.g., AWS, Google Cloud)Hosting infrastructure, storage of accounts, photographs, and AI OutputsUnited States
AI / model providersGeneration of AI Outputs from uploaded photographsUnited States
Stripe, Inc.Web subscription payment processingUnited States
Apple Inc.iOS subscription billing via Apple App StoreUnited States
Google LLCAndroid subscription billing via Google Play; analyticsUnited States
Meta Platforms, Inc.Advertising and conversion measurement (Facebook/Instagram)United States
TikTok / ByteDanceAdvertising and conversion measurementUnited States / Singapore
Customer-support toolsHandling support tickets and communicationsUnited States / EEA

A current list of material sub-processors can be requested at [email protected].

9. International Data Transfers

VSN CAPITAL LLC is based in the United States, and personal information collected through the Service is processed and stored in the United States. If you access the Service from outside the United States, your personal information will be transferred to, and processed in, the United States, where data-protection laws may differ from those of your country.

Where required by applicable law, we implement appropriate safeguards for international transfers, including the European Commission's Standard Contractual Clauses for transfers from the EEA, the UK Addendum for transfers from the UK, and equivalent safeguards for transfers from Brazil under the LGPD.

10. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy. The following retention principles apply:

  • Account data: retained while your Account is active and for up to twelve (12) months after deletion, for fraud-prevention and dispute-resolution purposes.
  • User Content (photographs and AI Outputs): retained for as long as you keep them in your Account; deleted within thirty (30) days after you delete them or close your Account, except for limited retention in encrypted backups for up to ninety (90) days.
  • Transactional and billing records: retained for at least seven (7) years for tax, accounting, and audit purposes.
  • Support communications: retained for up to thirty-six (36) months after the resolution of the related ticket.
  • Logs and analytics data: retained in identifiable form for up to twenty-four (24) months and may be retained in aggregated or de-identified form thereafter.

11. Data Security and Breach Notification

11.1 Security Measures

We implement industry-standard administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or destruction, including:

  • encryption of personal information in transit (TLS 1.2+) and at rest;
  • strict access controls and the principle of least privilege for our personnel;
  • multi-factor authentication for administrative systems;
  • logging, monitoring, and intrusion-detection mechanisms;
  • periodic security reviews and vulnerability assessments;
  • contractual obligations imposed on our service providers.

No security measure is perfect. Notify us immediately at [email protected] if you suspect unauthorized access to your Account.

11.2 Data Breach Notification

In the event of a data breach affecting your personal information, VSN CAPITAL LLC will provide notifications to affected Users and competent authorities as required by applicable law, including the Florida Information Protection Act, GDPR (EU and UK), LGPD (Brazil), and any other applicable regulation. Notifications will be made without undue delay and will describe the nature of the incident, categories of personal information affected, likely consequences, and measures taken.

12. Your Privacy Rights — Florida (Florida Digital Bill of Rights)

If you are a resident of the State of Florida, you may have the following rights under the Florida Digital Bill of Rights (Fla. Stat. §§ 501.701 et seq.):

  • Right to confirm and access: confirm whether we process your personal data and obtain a copy.
  • Right to correct: correct inaccuracies in your personal data.
  • Right to delete: request the deletion of personal data we process about you.
  • Right to data portability: obtain a copy of your personal data in a portable, readily usable format.
  • Right to opt out: opt out of the sale of personal data, targeted advertising, and profiling.
  • Right to opt out of voice or facial recognition: opt out of the collection or processing of your personal data through a voice-recognition or facial-recognition feature. The Service does not currently use such features.

To exercise these rights, contact us at [email protected]. We will respond within forty-five (45) days. If we deny your request, you may appeal by replying to our denial. If your appeal is denied, you may submit a complaint to the Florida Attorney General at myfloridalegal.com.

13. Your Privacy Rights — California (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

  • the right to know what personal information we collect, use, disclose, and sell or share;
  • the right to access the specific pieces of personal information we hold about you;
  • the right to delete personal information we have collected from you;
  • the right to correct inaccurate personal information;
  • the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising;
  • the right to limit the use and disclosure of sensitive personal information;
  • the right not to be discriminated against for exercising your CCPA rights.

VSN CAPITAL LLC does not sell personal information for monetary consideration. You may opt out of advertising cookies by emailing [email protected].

14. Your Privacy Rights — Other U.S. States

Residents of other U.S. states with comprehensive privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) may have rights similar to those described in Sections 12 and 13, subject to the applicable state law. To exercise these rights, contact [email protected].

15. Your Privacy Rights — EEA, UK, and Switzerland (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR or equivalent legislation:

  • the right of access to your personal data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure ("right to be forgotten");
  • the right to restrict or object to processing;
  • the right to data portability;
  • the right to withdraw consent at any time, where processing is based on consent;
  • the right to lodge a complaint with your local supervisory authority.

To exercise these rights, contact us at [email protected]. We will respond within one (1) month, with possible extension where permitted by law.

15.1 EU/UK Representative

If and to the extent VSN CAPITAL LLC is required to designate a representative in the European Union or the United Kingdom under Article 27 of the GDPR, the contact details of the designated representative will be published on this Privacy Policy and may also be obtained by emailing [email protected].

16. Your Privacy Rights — Brazil (LGPD)

If you are located in Brazil, you have the following rights under the Lei Geral de Proteção de Dados (Law No. 13,709/2018):

  • confirmation that we process your personal data and access to such data;
  • correction of incomplete, inaccurate, or out-of-date data;
  • anonymization, blocking, or deletion of unnecessary or excessive data;
  • data portability to another service provider, where applicable;
  • deletion of personal data processed with your consent;
  • information about public and private entities with which we have shared your data;
  • information about the possibility of refusing consent and the consequences of such refusal;
  • withdrawal of consent.

To exercise these rights, contact [email protected]. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

17. Children's Privacy

The Service is not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under thirteen (13). If you believe a child under thirteen (13) has provided us with personal information, contact us at [email protected] and we will promptly investigate and, where appropriate, delete the information.

Users between thirteen (13) and seventeen (17) may use the Service only with the verifiable consent of a parent or legal guardian, who shall be the contracting party for purposes of the Terms of Service.

18. Cookies and Similar Technologies

We and our service providers use cookies, mobile-application identifiers (such as IDFA on iOS and AAID on Android), web beacons, pixels, and similar technologies to operate the Service, remember your preferences, perform analytics, and measure marketing performance. The categories of Cookies we use include:

  • Strictly necessary Cookies: required to operate the Service, such as authentication and security.
  • Functional Cookies: used to remember your preferences and choices.
  • Analytics Cookies: used to understand how Users interact with the Service (e.g., Google Analytics).
  • Advertising Cookies: used to deliver and measure advertising on platforms such as TikTok, Meta (Facebook/Instagram), and Google.

18.1 Consent Management and Cookie Banner

Where required by applicable law, we will display a cookie banner or consent management tool the first time you visit the Service. This tool allows you to accept all Cookies, reject all non-essential Cookies, or selectively manage your preferences by category. You may review and change your preferences at any time through the "Cookie Preferences" link available within the Service.

18.2 Browser and Device Controls

You can also manage Cookies through your browser settings or your device's advertising-identifier settings. Disabling certain Cookies may impair the functionality of the Service. To opt out of interest-based advertising more broadly, you may visit aboutads.info/choices or youronlinechoices.eu.

19. Mobile App Permissions

Our mobile applications may request access to specific device features. The most common permissions are:

  • Camera: to allow you to take photographs of your room directly within the application.
  • Photos / Media library: to allow you to upload existing photographs of your rooms.
  • Notifications: to send you service-related and, where you opt in, marketing notifications.
  • Storage: to save AI Outputs to your device, where you choose to download them.

You can manage these permissions at any time through your device settings. Revoking certain permissions may limit the functionality of the Service.

20. Do Not Track Signals

Some browsers transmit "Do Not Track" signals. Because there is no industry standard for responding to such signals, we do not currently respond to them. We do, however, honor recognized opt-out signals such as the Global Privacy Control (GPC) where required by applicable law.

21. Third-Party Links

The Service may contain links to third-party websites, applications, or services that are not operated or controlled by VSN CAPITAL LLC. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third party before providing personal information to them.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect the date of the most recent revision. For material changes, we will provide reasonable advance notice by posting a prominent notice within the Service or sending an email to the address associated with your Account. Your continued use of the Service after the effective date of any change constitutes your acceptance of the revised Privacy Policy.

23. Contact and Data Subject Requests

23.1 Account Self-Service Management

You can manage and delete your Account directly within the Service. To delete your Account and request the removal of your personal data, navigate to Settings → Account → Delete Account in the RoomUp AI mobile application or the corresponding option on the website at roomupai.com. Account-deletion requests are processed automatically; your User Content and AI Outputs are removed from active systems within thirty (30) days.

23.2 Contact Details

VSN CAPITAL LLC

Operator of RoomUp AI

Florida, United States of America

Email: [email protected]

Website: https://roomupai.com

To help us process your request efficiently, please specify the right you wish to exercise and provide enough information to verify your identity. We will respond within the time periods required by applicable law (typically thirty (30) to forty-five (45) days).

VSN CAPITAL LLC  ·  Florida, USA  ·  End of Privacy Policy