Room360 Consumer Privacy PolicyEffective Date: September 3, 2026Last Updated: September 3, 2026This Privacy Policy explains how Auroom FZ-LLC, trading as Room360 (“Room360”, “we”, “us”), processes personal data when you use the Room360 Consumer App and related website (the “Consumer Service”). It does not cover Room360 PRO, which has its own Privacy Policy.Controller and ageController: Auroom FZ-LLCAddress: HD 04A, in5 Design, Dubai Design District, Dubai, United Arab EmiratesPrivacy contact: Aleksandr Sinaiskii, info@room360.aiThe Consumer Service is not intended for users under 16. You must be at least 16 to create an account, scan a room, upload content, receive personalised communications, make in-app purchases or use retailer links. An App Store content rating is separate from this contractual eligibility rule.Data we processWe may process account information; email address; authentication information supplied by Apple or Google when you choose those sign-in methods; device, IP, security and usage information; support communications; push/email preferences; Apple subscription and in-app-purchase transaction identifiers; and retailer-link attribution data.For room scanning, we process the video you capture and upload, temporary frames generated from it, technical metadata needed to process the scan, the resulting room geometry, 3D model, render, design choices, selected products and project information. Do not intentionally record people, identity documents, payment cards, health information or other unnecessary personal data. You must have a lawful basis to upload any identifiable person.No OpenAI processing in ConsumerThe Consumer Service does not send room scans, photographs, catalogue data or other user content to OpenAI and does not use OpenAI-powered AI features. It uses Room360’s server-side algorithms and rendering infrastructure.Purpose and legal basisWe process data to operate accounts; process scans and deliver renders; provide Apple subscriptions and purchases; maintain security and prevent fraud; provide support; send marketing by email or push only with consent; and attribute retailer referrals. Where GDPR applies, the primary legal bases are performance of a contract, consent for marketing, legitimate interests for security and fraud prevention, and legal obligations.We do not sell personal data or use room-scan data for advertising profiling.Storage and retentionRoom-scan videos are stored and processed in Amazon Web Services, eu-west-1 (Dublin, Ireland). We delete raw scan videos immediately after the requested render is successfully delivered. If delivery is not completed, we delete the raw scan at your next launch of the App and in all cases no later than 30 days after upload.Renders, 3D models and projects are retained while they remain in your account and deleted from active systems within [90 DAYS] after you delete them or close your account. Security logs are retained for [90 DAYS]. Apple transaction records are retained as required for accounting, tax, fraud prevention and dispute resolution.Photos saved in your local Room360 catalogue are stored only on your device until you delete them in the App. Room360 does not back up these local catalogue photos to cloud storage.Recipients and transfersWe share data only as needed with AWS and AWS Amplify for hosting, storage, authentication, backend, email and push notifications; Apple and Google for sign-in; Apple for subscriptions and in-app purchases; retailers and affiliate networks after a referral; and authorities or advisers where legally required.Room360 is based in the UAE. AWS scan processing occurs in Ireland; other providers may process limited data in other countries. Where required, we use an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism. Retailers are responsible for their own checkouts and privacy practices.Rights, security and contactSubject to applicable law, you may request access, correction, deletion, restriction, portability or objection; withdraw marketing consent; disable push notifications in device settings; and request account deletion in the App through User Account → Delete Account or by emailing info@room360.ai. EEA and UK users may complain to their local data-protection authority.We use appropriate safeguards including access controls, encryption in transit and at rest where appropriate, and contractual controls for providers. We may update this Policy with notice where required.Contact: Auroom FZ-LLC / Room360, HD 04A, in5 Design, Dubai Design District, Dubai, UAE — info@room360.ai.Publication blockers: confirm project-retention period.