Privacy Policy

This policy explains what information Roma AI ("we", "us", "our") collects when you use our website, desktop plugin, and related services (the "Service"), how we use it, who we share it with, and the choices you have.

Account information: your email address and password (stored as a salted hash, never in plain text) when you register directly, or your email and name via Google when you sign in with Google OAuth.

Usage data: the prompts you submit, the settings you choose (model, resolution, duration, and similar generation parameters), the media you generate, your credit balance and transaction history, and your Workflow projects. Generated media is private to your account by default; if a feature lets you mark an item public (e.g. a gallery), only items you explicitly mark that way are visible to others.

Technical data: standard request metadata (IP address, browser/device information, timestamps) collected automatically for security, abuse prevention, and debugging.

Payment data: we do not store your card details. Payments are handled entirely by our payment processor, Lemon Squeezy — we only receive confirmation that a purchase succeeded and which plan it was for.

We don't sell your personal data. We share the minimum necessary with the following service providers, each acting on our behalf to operate the Service:

fal.ai — our AI generation provider. The prompt and settings for a given generation request are sent to fal.ai to produce the resulting image or video. Review fal.ai's own privacy policy for how they handle that data on their side.

OpenAI — used for the optional GPT prompt-enhancement feature. When you choose to enhance a prompt, the draft prompt (and, for image-aware enhancement, the reference image) is sent to OpenAI's API to produce an improved prompt.

Google — if you sign in with Google, Google's OAuth service confirms your identity and shares your email/name with us; we don't receive your Google password.

Lemon Squeezy — our payment processor, for handling purchases and subscriptions.

We may also disclose data if required by law, or to protect the rights, safety, and security of Roma AI, our users, or the public.

Credits are purchased either as a one-time Plugin bundle or a recurring Pro/Studio subscription, processed by Lemon Squeezy. Your credit balance, the transactions that changed it, and which plan granted them are stored on our systems so we can show your history and enforce plan limits — this is usage/account data, not payment-card data.

Access and export: you can request a copy of the personal data we hold about you by contacting us (see below).

Deletion: you can permanently delete your account and all associated data — generated media, prompts, credit/transaction history, and Workflow projects — from your account settings, or by contacting us. Deletion is permanent and cannot be undone.

Correction: you can update your account information at any time from your account settings.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA — this section will be expanded once this policy has had a full legal review.

We retain account and usage data for as long as your account is active, plus a reasonable period afterward for legal, security, and fraud-prevention purposes. Deleting your account removes your data from active use per the deletion process above.

We use industry-standard measures — password hashing, encrypted connections, and access controls — to protect your data. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.

We may update this policy as the Service evolves. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy, or a request to access/export/delete your data, can be sent to romaaieditor@gmail.com.