Privacy Policy

Scope

This Privacy Policy applies to information we collect through the Service, including our website, web application, and related communications (collectively, the “Service”). It does not apply to third-party websites, products, or services that may be linked from the Service or used with it; those are governed by their own policies.

Roles

Sidewave acts as the controller of your personal information unless a separate agreement states otherwise. We provide the Service on a controller-to-user basis and generally do not act as a processor for your data. You are responsible for providing any notices and obtaining any consents required before submitting personal data to the Service.

Information We Collect

We collect information you provide directly, information generated through your use of the Service, and information from third parties.

• Account and profile information: such as your name, email address, authentication identifiers, and related account details.
• User content: including photos/images you upload, prompts and instructions you submit, style selections and settings, and the images generated by the Service (collectively, “Content”). Do not include sensitive personal data unless we have expressly agreed in writing to receive it.
• Transaction and billing information: purchase history, subscription status, and limited billing details associated with your purchases. Payment card information is processed by our payment providers and is not stored by us in full.
• Usage and device information: such as log data, IP address, device identifiers, browser type, pages/screens viewed, referring URLs, timestamps, and interactions with features.
• Cookies and similar technologies: used to enable core functionality (e.g., sign-in), remember preferences, and measure performance/analytics.
• Communications: information you provide when contacting us (e.g., support requests, feedback) and our responses.

How We Use Information

We use information for purposes including:

• Providing, operating, securing, and maintaining the Service.
• Processing requests, generating outputs, and delivering features you use.
• Processing payments, subscriptions, and credit purchases, and preventing fraudulent transactions.
• Personalizing and improving the Service, including product development, troubleshooting, quality assurance, and analytics.
• Monitoring, detecting, preventing, and responding to security incidents, abuse, prohibited uses, and policy violations.
• Communicating with you about the Service (e.g., transactional messages, account notices, support).
• Complying with legal obligations and enforcing our agreements and policies, including protecting our rights and pursuing remedies.

Legal Bases

Where required by law (e.g., in the EU/UK), we process personal data on the following bases: (a) to perform a contract with you and provide the Service; (b) for our legitimate interests, including securing and improving the Service, preventing fraud and abuse, and understanding usage; (c) to comply with legal obligations; and (d) with your consent where required (such as certain cookies, marketing, or optional features). You may withdraw consent at any time where applicable.

AI Processing and Content

The Service uses automated systems, including AI models, to process Content you submit and generate outputs. You are responsible for the Content you upload and the results you choose to use.

• Only upload photos you have the right to use: Do not upload photos that you do not own or that you do not have permission to use, and do not upload photos that violate any person’s privacy or other rights.
• Avoid sensitive information: Do not upload images or prompts containing sensitive personal information (e.g., government IDs, financial info, health info), unless you have a lawful basis to do so and accept the risks.
• License to operate the Service: You grant us a worldwide, non-exclusive, royalty-free license to host, store, reproduce, process, and transmit Content solely to provide, secure, maintain, and improve the Service and as otherwise permitted by law. Where permitted, we may use aggregated or de-identified data derived from Content to improve the Service.
• Service quality and safety: We may review Content (including with automated tools and, where necessary, human review) to enforce policies, prevent abuse, improve quality, and address technical issues.

Prohibited Uses and Enforcement

You may not use the Service for unlawful, harmful, or malicious activities, including to generate, share, or facilitate abusive, deceptive, infringing, or privacy-violating content. You may not attempt to probe, scan, test, or compromise the Service or bypass safeguards.

We may investigate suspected violations and may suspend or terminate access, remove Content, or take other action at any time, with or without notice, to protect the Service, our users, and Sidewave.

How We Share Information

We may share information as follows:

• Service providers and processors: We use third-party providers to help operate the Service, such as identity/authentication (Clerk), database/storage (Supabase), AI inference providers (including FAL), payments and billing (Polar), and product analytics (PostHog and Umami).
• Affiliates and business partners: We may share information with our affiliates, subsidiaries, and trusted partners for the purposes described in this Privacy Policy.
• Legal and compliance: We may disclose or preserve information to comply with law, respond to lawful requests (including from law enforcement or rights holders), protect rights and safety, or enforce our agreements and policies.
• Business transfers: Information may be shared or transferred in connection with a merger, acquisition, financing, reorganization, or sale of assets.
• Aggregated or de-identified data: We may share information that has been aggregated or de-identified so it cannot reasonably be used to identify you.
• With consent: We may share information for other purposes disclosed at the time of collection with your direction or consent.

Cookies and Analytics

We use cookies and similar technologies to run the Service and understand usage. We use analytics tools such as PostHog and Umami to measure performance and improve the Service. Depending on your device/browser settings, you may be able to limit cookies, but some features may not work properly. You can adjust cookie settings in your browser or device; some analytics providers also offer opt-outs. We do not currently respond to “Do Not Track” signals.

Data Retention

We retain information for as long as reasonably necessary to provide the Service, maintain records, comply with legal obligations, resolve disputes, and enforce agreements. We may retain certain information (including transaction records and security logs) even after account closure where permitted or required by law, and we may retain de-identified or aggregated data for analytics and improvement.

Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information. However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your accounts and devices. You use the Service at your own risk.

International Data Transfers

The Service may be hosted and processed in countries other than your country of residence, including countries that may have different data protection laws. By using the Service, you understand that your information may be transferred to and processed in such countries. Where required, we will use appropriate safeguards such as standard contractual clauses (SCCs) or the UK International Data Transfer Addendum. You may contact us for more information about these safeguards.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or object to certain processing of your information, to restrict or port your information, and to opt out of certain communications (including marketing). Where we process information based on legitimate interests, you may have the right to object. We may need to verify your identity before responding to requests, and we may deny requests where permitted by law (for example, when honoring a request would infringe on others’ rights or our ability to provide the Service). You may lodge a complaint with your local data protection authority if you believe your rights have been infringed.

Regional Notices

Rights and disclosures vary by jurisdiction. If you are in the EU/EEA or UK, you may have rights to access, correct, delete, restrict, or object, to data portability, and to lodge a complaint with your supervisory authority. If you are in certain U.S. states with privacy laws, you may have rights to know, access, correct, delete, and to opt out of “sales,” “sharing,” or “targeted advertising” as defined by applicable law; we do not sell personal information as those terms are commonly defined. You may exercise rights by contacting us using the details below; authorized agents may submit requests where permitted. We may verify requests to protect your data.

Children’s Privacy

The Service is not directed to children, and we do not knowingly collect personal information from children under 16 (or a higher age where required by law). Do not use the Service if you are under the age of majority in your jurisdiction. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

Disclaimers and Limitation of Liability

The Service and any outputs are provided on an “as is” and “as available” basis. AI-generated outputs may be inaccurate, incomplete, or unsuitable for your intended use. To the maximum extent permitted by law, Sidewave disclaims all warranties and will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or any loss of profits, revenues, data, goodwill, or other intangible losses, arising out of or related to your use of the Service or reliance on outputs. These limitations apply in addition to the Terms of Use.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above. Your continued use of the Service after an update means you accept the updated Privacy Policy to the extent permitted by law.

Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at privacy@roomrevamp.com.

You may also contact us through the support channels provided in the Service. Requests to exercise privacy rights should be sent to the email address above so we can verify and process them.

You can also return to the homepage.