Privacy policy

What Room×Lab does

Room×Lab provides furniture discovery across retailers and publishes original interior-design inspiration created and reviewed by the Room×Lab team. AI assistants can use our read-only furniture connector to search and compare public catalog information. Our internal publishing workspace can connect to social platforms, including Pinterest and Instagram, to publish Room×Lab-owned content.

Information we process

When you visit Room×Lab, we record privacy-limited traffic events such as the page viewed, anonymous browser-session identifier, referral domain, campaign labels, broad device type, country, and selected on-site actions. We do not store your IP address in this analytics dataset or use advertising identifiers. If you create and sign in to a Room×Lab account, we keep your email address, an internal account identifier, saved products, and first-party interactions with rooms and products so your library can sync and future recommendations can become more relevant; anonymous browsing is not added to this personal profile. Passwords are stored as salted hashes rather than readable text. When an authorized Room×Lab administrator connects a social account, we process the account identifier, granted permissions, access and refresh tokens, boards needed for publishing, and the identifiers and delivery status of content we publish. We do not ask for or store the social account password through our publishing integration.

Your personal profile

You can optionally add a display name and a short bio in the iOS Library. We store these details with your account to display your personal profile and sync it between devices. Your profile is visible only to you; adding these details does not publish them. You can edit or clear either field. Profile details are included in your account data export and removed when you delete your account.

Apple and Google sign-in

When available, you can use Apple or Google to create or access your Room×Lab account. We verify the provider's sign-in token and keep its account identifier and verified email address, including an Apple private relay address if you choose Hide My Email. We do not keep your provider profile photo or name on our server, request access to your contacts or files, or receive your Apple or Google password. Apple authorization refresh tokens are encrypted on our server so we can revoke the connection when you delete your Room×Lab account. You can continue browsing as a guest, and an email match alone does not connect a provider to an existing account.

Taste quiz

Your saved taste stays on your device and can sync to your account when you sign in. Separately, if quiz analytics are enabled, we record a random session and attempt identifier, the quiz release and experiment variant, the choices shown and selected, skipped questions, broad room/home type, preference results, and whether you finish, save, or open shopping. This helps us improve the questions and compare quiz versions. These records do not include your name, email, account ID, IP address, exact location, or typed search terms, and are not added to your personal account profile.

You can turn off this recording using the checkbox at the start of the quiz. We also honor Do Not Track and Global Privacy Control for this quiz analytics stream. Turning it off does not prevent taking the quiz, saving your taste, or shopping. “Forget my taste” removes the saved personalization profile, not previously recorded anonymous analytics.

Personalized recommendations

The rooms and pieces you save or like, and the rooms you scroll past, are turned into a small summary of the styles, colors, materials, tones and price ranges you respond to. It orders your Rooms feed and the shop's “For you” sort. It is kept on your device and, when you are signed in, synced to your account. This is on by default; turn off “Learn from what I save and like” in your account settings (Library → Room preferences in the iOS app) to stop it and clear what was learned. It is included in your data export.

Optional: help improve recommendations for everyone

When you create an account, or later in your account settings, you can choose to let us study your saves, likes and that preference summary together with other members who made the same choice. This is off unless you tick it. We use it to tune how recommendations work for everyone, for example how quickly they should follow what people save. We analyze it without your name or email, report only aggregate results, and do not use it for advertising or sell it.

You can turn it off at any time; we then stop including your account in future analysis. Your own recommendations work the same either way. Deleting your account removes this data with the rest of your account.

Optional iOS room preference research

In Library → Room preferences, you can choose to share room exposures, foreground viewing time, likes, saves, stage changes and product opens. This is off by default. Events include a random installation identifier, session identifier, room and content versions, and feed position. They are not joined to your account, email, advertising identifier or precise location. Your room order is randomized locally even when research is off.

We use these events to understand room preferences and develop recommendations. Raw events expire after 90 days. Turning research off clears unsent events and stops future recording; it does not erase previously received events. There is no cross-app advertising tracking.

Furniture connector and AI assistants

When an AI assistant calls the Room×Lab MCP connector, we process the tool arguments it sends, such as furniture search terms, category, budget, dimensions, design preferences, retailer names, and product identifiers. The connector does not require a Room×Lab account and does not request your email address, full conversation, payment details, or advertising identifier. Please do not include personal or confidential information in furniture searches.

To protect availability and deter bulk extraction, we derive a hashed rate-limit key from request network information, the client user agent, and a session header when supplied. These inputs can describe the assistant provider's connection rather than your device. Our infrastructure processes request metadata to operate and secure the service, and operational errors may be logged. The MCP handlers do not write catalog-engagement or outbound-click analytics events.

Returned Room×Lab links include referral labels identifying the assistant source and tool, not a conversation or user identifier. If you open a link, the website privacy practices above apply. Your AI assistant provider separately controls how it processes your conversations, tool requests, and results under its own privacy policy.

How we use and protect it

We use traffic events to understand audience growth, content usefulness, referral sources, and aggregate engagement. We use signed-in saves and preference activity to improve the rooms and products shown to that account, and, only for members who opt in, to improve recommendations for everyone. We use connected social-account information only to publish, schedule, monitor, and—where a platform supports it—remove Room×Lab content. Tokens are encrypted at rest, kept out of the website and source repository, and available only to the private publishing service. We do not sell personal information or use connected-account data for advertising profiles.

Retention and deletion

Detailed quiz analytics are kept for up to one year and removed by a daily cleanup. A temporary retry queue stays in browser-session storage for no more than 24 hours and is cleared when you turn quiz analytics off. Browser storage restrictions, offline use or privacy settings may prevent some events from being recorded.

Our traffic-event provider retains Analytics Engine data for a limited period, currently three months. Signed-in users can permanently delete their account and associated saved data from account settings in the Room×Lab app or website. We retain connection data while an administrator publishing integration is active and retain publication records for operational history; an authorized administrator may disconnect the integration at any time. Questions or deletion requests can also be sent to contact@roomxlab.com.

Custom room requests

When you request a custom room, we store the description, room type, style hints, optional furniture budget, submission consent, optional reference photos and request status with your account. You can send a request from the iOS app or the website. Both resize selected photos and remove embedded location and camera metadata before upload. Room×Lab operators review the brief and use OpenAI image and language tools to create and check the design. Please do not include addresses, sensitive information or other people's personal details in your brief. We use your account email to confirm that we received a request and to tell you when your room is ready or if we could not complete it; these emails link to your private design inbox and do not include your brief, photos or room.

Custom rooms are in an early preview. If we invite you to it, we record the invitation and how many rooms it includes. About a day after your room is delivered, we email you once to ask how it turned out. Answering is optional. Your answers (ratings, multiple-choice answers and anything you write) are stored with that room and your account, are used only to improve custom rooms and decide what they should cost, are included when you download your data, and are deleted with your account.

Briefs, reference photos and delivered room images are private to your account and authorized Room×Lab operators. They are not automatically published to our public room feed. We keep the cloud request, reference photos and delivered images until you delete your account. Temporary generation files may also be kept on our design workstation for quality review; operators remove those files when a deletion request is received or the associated account no longer exists. You can export the request information with your account data. OpenAI processes submitted brief information and reference photos under its applicable service settings and privacy terms.

Third-party services

Social publishing is also governed by the privacy terms of the connected platform. Our infrastructure provider processes encrypted operational data only as needed to run the service.

Contact

Questions or requests can be sent to contact@roomxlab.com.