Privacy Policy
This Privacy Policy explains how HomeAI collects, uses, and protects your personal data.
Last updated: July 26, 2025
Table of Contents
1. Information We Collect2. How We Use Information3. AI Processing & Images4. Legal Bases for Processing5. Information Sharing6. Cookies & Tracking Technologies7. Data Security8. Data Retention9. Your Rights10. Third‑Party Services & Analytics11. International Transfers12. Children’s Privacy13. Changes to This Policy14. Contact Us
1. Information We Collect
1.1 Personal Information
- Name, email address, and password
- Payment information (via payment provider)
- Profile details (e.g., style, room dimensions)
- Support queries & preferences
1.2 Usage & Technical Information
- Uploaded images, videos, and prompts
- Annotations and design metadata
- Clicks, feature interactions
- Device, browser, IP, crash logs
2. How We Use Information
- Deliver and improve AI design services
- Process images and prompts
- Personalize content and recommendations
- Handle account and billing
- Send updates and marketing (opt-out available)
- Customer support and fraud detection
- Legal compliance and security
3. AI Processing & Images
- Images processed by proprietary ML models
- De-identified data may improve models (opt-out available)
- No image sales to third parties
- Permanent deletion requests are supported
4. Legal Bases for Processing
- Contractual necessity (services you request)
- Consent (e.g., marketing, model training)
- Legitimate interest (security, improvement)
- Legal obligation (e.g., tax compliance)
5. Information Sharing
- No sale of personal data
- Service providers (e.g., hosting, email)
- Legal requirements and safety
- Business transfers (with notice)
- With your explicit consent
- Aggregated data for research
6. Cookies & Tracking Technologies
- Remember preferences and sessions
- Measure performance and debug
- Personalize ads (where allowed)
Cookies are managed via your browser settings.
7. Data Security
- TLS and AES‑256 encryption
- Access controls and 2FA for internal tools
- Penetration testing and audits
- ISO 27001-certified cloud hosting
8. Data Retention
- Account: Deleted + 30 days
- Images: 30 days (unless saved)
- Projects: Until deleted
- Logs: 24 months
- Payments: 7 years (tax/compliance)
9. Your Rights
- Access, correct, delete your data
- Object to or restrict processing
- Opt-out of marketing and AI training
- Request data portability
- Email: info@wompalabs.com
10. Third‑Party Services & Analytics
- Stripe (payments)
- AWS (cloud hosting)
- Google Analytics 4
- Customer.io (emails)
11. International Transfers
We use Standard Contractual Clauses or other safeguards for data transfers outside your jurisdiction.
12. Children’s Privacy
HomeAI is not intended for children under 13. We do not knowingly collect data from children. If we learn we have, we will delete it.
13. Changes to This Policy
We will notify you of material changes at least 30 days in advance via email or in-app. Continued use after the effective date constitutes acceptance.