Room Journal

1. Introduction

Room Journal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your email address and password. Passwords are securely hashed and never stored in plain text.

Property and Home Data

You may provide information about your properties, including home names, addresses, room details, documentation entries, contractor information, paint colors, costs, and descriptions. This data is provided voluntarily and is stored to deliver the Service.

Media Files

You may upload photos, videos, PDFs, and other files. These files are stored securely in our cloud storage infrastructure and are only accessible to you and users you explicitly share access with.

Usage Data

We automatically collect certain information when you use the Service, including your IP address, browser type, device information, and pages visited. This information helps us improve the Service.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Authenticate your identity and manage your account
Store and organize your property documentation
Enable sharing and collaboration features with invited members
Generate thumbnails and optimize media files you upload
Send transactional emails such as property invitations
Monitor and analyze usage trends to improve user experience

4. AI-Powered Features

Our Service may offer optional AI-powered document parsing (e.g., invoice and receipt scanning). When you use these features, the content of the uploaded document is sent to a third-party AI provider (OpenAI) for processing. We do not use your documents to train AI models. The parsed data is returned to you and is not retained by the AI provider beyond the processing request.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

With your consent: When you invite members to a property, they can access that property's data.
Service providers: We use third-party services (Supabase for authentication and storage, Vercel for hosting) that process data on our behalf.
Legal requirements: We may disclose information if required by law, regulation, or legal process.

6. Data Storage and Security

Your data is stored using Supabase (built on PostgreSQL) with row-level security policies. Media files are stored in Supabase Storage with signed URLs that expire after one hour. We use encryption in transit (TLS/SSL) and implement access controls to protect your data. While we take reasonable measures to protect your information, no method of electronic storage is 100% secure.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and associated files within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Withdraw consent for optional data processing

To exercise any of these rights, please contact us using the information below.

9. Cookies

We use essential cookies to manage authentication sessions. We do not use third-party tracking or advertising cookies.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at our contact page.