Privacy policy
Last updated : October 10, 2026
This policy explains what personal data roompano processes, why, and what your rights are under the EU General Data Protection Regulation (GDPR).
Data controller
Fronami, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Contact for any question about your data: hello@roompano.com.
What we collect, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, name and Google ID (Sign in with Google) | Create and secure your account | Performance of contract |
| Uploaded photos and generated images | Provide the service: generate, store and share your stagings | Performance of contract |
| Subscription, credits, billing history | Bill you, apply credits, keep accounting records | Contract and legal obligation |
| Arrival channel (referring site, utm parameters, first page viewed), saved at sign-up | Learn which channels bring us customers | Legitimate interest |
| Aggregated visit statistics | Measure website traffic | Legitimate interest |
We never see your card details: payment is entered directly with Stripe.
We don't use your photos to train AI models, and we don't sell any data.
Cookies and local storage
roompano sets no advertising cookies and no third-party analytics cookies. There is no Google Analytics and no ad pixel.
The site uses your browser's local storage for two things: keeping you signed in, and remembering how you first arrived (referring site, utm parameters, landing page), which is sent only if you create an account. Traffic is measured without cookies, using an anonymous identifier that changes every day and can't be used to follow you from one day to the next.
Processors
Your data is processed by the following providers, only to run the service:
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting | United States / EU (Paris region) |
| Sealos | Application and database hosting | United States, West Coast |
| Cloudflare, Inc. (R2) | Storage of photos and images | Western Europe |
| Google LLC | Sign in with Google; image generation models (Gemini) | United States |
| OpenRouter, Inc. | Routing generation requests to AI models | United States |
| OpenAI | 360 panorama generation model | United States |
| Replicate, Inc. | 4K upscaling | United States |
| Stripe | Payments and subscriptions | United States / EU |
| Resend | Service emails | United States |
Transfers to the United States rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
Retention
- Account: while the account is active, then deleted within 30 days of a deletion request.
- Photos and images: until you delete them (each property and each generation can be deleted from the workspace) or the account is deleted.
- Billing records: 10 years, as required by French accounting law.
- Database backups: rolling 14 days.
Share pages
When you publish a property share page (roompano.com/v/…), its images are visible to anyone with the link and may be indexed by search engines. You can unpublish it at any time, and the page stops being accessible.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, email hello@roompano.com from your account's address. We reply within one month.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the authority in your own country.
Changes
Any significant change to this policy is posted on this page with its update date.