Web privacy notice

Updated 1 November 2026. This notice covers the Roomascope web preview.

Operator

Aleksandr Plutalov, individual entrepreneur in Belgrade, Serbia, operating as Pluto Lab. Contact: [email protected].

Your information

We process your account identifier, session, email if you sign in, chosen room photos, style choices, generated designs, usage allowance and technical connection information. Selected images are resized in your browser. The photo is sent to our backend when you request a design, after access is checked.

Providers and purpose

Cloudflare hosts the web app and forwards API requests. Supabase handles authentication, private image storage and design records. Resend delivers account verification and sign-in emails, processing your email address and one-time code; room photos are not sent to the email provider. fal and the selected image model provider process your photo to create a design. The current model is Nano Banana 2. Our backend sends limited diagnostic events to Sentry and generation events to PostHog; we do not intentionally send photos or image URLs in these events. This preview does not load Meta Pixel, session replay or browser advertising analytics.

Browser storage

We use local storage to keep your sign-in session and IndexedDB to preserve an unfinished design request and its selected photo, so interrupted requests can be resumed safely. The pending photo is removed from this browser store after completion. An unlinked guest session can be lost when browser storage is cleared. Use Account → Keep my designs to confirm your email, then sign in with that email to recover your account on another browser or device.

Retention and deletion

Account photos and designs remain in application storage until account deletion. Use Account → Delete account and designs, or contact support. Server cleanup is queued and can be delayed by processing or provider failures. Provider logs and backups can persist under their retention policies. Deletion of all downstream provider records is not automatic; support handles verified requests, subject to applicable legal and security retention.

International processing and rights

Providers may process data outside Serbia, including the United States. We process information to provide the requested service, protect its reliability and meet applicable obligations. Where applicable, you can request access, correction, deletion or a copy, object to processing, or complain to your local data protection authority. Contact support without sending passwords or verification codes.

The service is not intended for children under 13. Upload only room images you have permission to use and avoid people, documents or other sensitive content.